Action not permitted
Modal body text goes here.
Modal Title
Modal Body
CVE-2026-27145 (GCVE-0-2026-27145)
Vulnerability from cvelistv5 – Published: 2026-06-02 22:01 – Updated: 2026-09-11 12:09
VLAI
EPSS
VEX
Title
Inefficient candidate hostname parsing in crypto/x509
Summary
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
Severity
6.5 (Medium)
7.5 (High)
SSVC
Exploitation: none
Automatable: no
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-06-04 12:34 UTC
Assigner
References
98 references
Impacted products
229 products
| Vendor | Product | Version | CPE status | |
|---|---|---|---|---|
| Go standard library | crypto/x509 |
Affected:
0 , < 1.25.11
(semver)
Affected: 1.26.0-0 , < 1.26.4 (semver) |
guessed | |
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 8 |
Unaffected:
0:1.6.7-1.el8ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el8 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.5 for RHEL 9 |
Unaffected:
0:1.6.7-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.5::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.6 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.6::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 10 |
Unaffected:
0:1.6.6-1.el10ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el10 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 for RHEL 9 |
Unaffected:
0:1.6.6-1.el9ap , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.26.4-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.152.1-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.9.27-7.el10_2.2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
1:0.3.8-6.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.4.9.2-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:0.2.10-1.el10_2 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.0-4.el10_2.5 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10 |
Unaffected:
0:1.0.1-2.el10_2.3 , < *
(rpm)
cpe:/o:redhat:enterprise_linux:10.2 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.5-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:1.26.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.4.7-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
1:0.3.2-5.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.152.1-1.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 10.0 Extended Update Support |
Unaffected:
0:0.2.3-6.el10_0 , < *
(rpm)
cpe:/o:redhat:enterprise_linux_eus:10.0 |
||
| Red Hat | Red Hat Enterprise Linux 7 Extended Lifecycle Support |
Unaffected:
0:1.4.0-8.el7_9 , < *
(rpm)
cpe:/o:redhat:rhel_els:7 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
8100020260710105056.a3795dee , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 8 |
Unaffected:
1:0.2.5-9.el8_10 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:8 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:1.26.4-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
0:0.152.1-1.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
2:1.22.2-7.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9 |
Unaffected:
1:0.2.7-8.el9_8 , < *
(rpm)
cpe:/a:redhat:enterprise_linux:9 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
1:0.2.2-1.el9_2.4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_2 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.2 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:0.152.1-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
0:1.26.5-1.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions |
Unaffected:
1:0.2.4-9.el9_4 , < *
(rpm)
cpe:/a:redhat:rhel_e4s:9.4 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:1.26.5-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
0:0.152.1-1.el9_6 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat Enterprise Linux 9.6 Extended Update Support |
Unaffected:
1:0.2.7-1.el9_6.5 , < *
(rpm)
cpe:/a:redhat:rhel_eus:9.6 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
0:0.23.0-5.rhaos4.18.el8 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el8 |
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
Unaffected:
0:0.2.1-1.1.el8ost , < *
(rpm)
cpe:/a:redhat:openstack:16.2::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 8 |
Unaffected:
0:0.0.4-1.el8sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el8 |
||
| Red Hat | Red Hat Satellite 6.16 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.16::el9 |
||
| Red Hat | Red Hat Satellite 6.17 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.17::el9 |
||
| Red Hat | Red Hat Satellite 6.18 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.18::el9 |
||
| Red Hat | Red Hat Satellite 6.19 for RHEL 9 |
Unaffected:
0:0.0.4-1.el9sat , < *
(rpm)
cpe:/a:redhat:satellite:6.19::el9 |
||
| Red Hat | Streams for Apache Kafka 3.2.1 |
Unaffected:
danielqsj-kafka_exporter , < *
(rpm)
cpe:/a:redhat:amq_streams:3.2::el9 |
||
| Red Hat | Cert Manager support for Red Hat OpenShift release 1.19 |
Unaffected:
1786613805 , < *
(rpm)
cpe:/a:redhat:cert_manager:1.19::el9 |
||
| Red Hat | Cluster Observability Operator 1.5.0 |
Unaffected:
1787593946 , < *
(rpm)
cpe:/a:redhat:cluster_observability_operator:1.5::el9 |
||
| Red Hat | Compliance Operator 1 |
Unaffected:
1786380082 , < *
(rpm)
cpe:/a:redhat:openshift_compliance_operator:1::el9 |
||
| Red Hat | external secrets operator for Red Hat OpenShift 1.1 |
Unaffected:
1786614676 , < *
(rpm)
cpe:/a:redhat:external_secrets_operator:1.1::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1786549223 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1787201612 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1786764622 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.1 |
Unaffected:
1787176886 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.10::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911941 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911952 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911945 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786912006 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911973 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786911984 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1786907276 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787238383 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239116 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.11 |
Unaffected:
1787239595 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.11::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786577950 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786750700 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786983362 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.17 |
Unaffected:
1786664288 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.17::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259112 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787264185 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787259740 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.6 |
Unaffected:
1787260821 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.6::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784737366 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784738758 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1784677239 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259015 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259059 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259011 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259016 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787258993 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259044 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259047 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259108 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259099 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259126 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259114 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.8 |
Unaffected:
1787259113 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.8::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787195995 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787201646 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1786764601 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | multicluster engine for Kubernetes 2.9 |
Unaffected:
1787176716 , < *
(rpm)
cpe:/a:redhat:multicluster_engine:2.9::el9 |
||
| Red Hat | Multicluster Global Hub 1.4.5 |
Unaffected:
1784061472 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.4::el9 |
||
| Red Hat | Multicluster Global Hub 1.6.5 |
Unaffected:
1784152046 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.6::el9 |
||
| Red Hat | Multicluster Global Hub 1.7.0 |
Unaffected:
1784768332 , < *
(rpm)
Unaffected: 1785775948 , < * (rpm) cpe:/a:redhat:multicluster_globalhub:1.7::el9 |
||
| Red Hat | Multicluster Global Hub 1.8.0 |
Unaffected:
1785763319 , < *
(rpm)
cpe:/a:redhat:multicluster_globalhub:1.8::el9 |
||
| Red Hat | OpenShift API for Data Protection 1.5 |
Unaffected:
1788860461 , < *
(rpm)
cpe:/a:redhat:openshift_api_data_protection:1.5::el9 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.3 |
Unaffected:
1784727697 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | OpenShift Developer Tools and Services 1.6.3 |
Unaffected:
1784728036 , < *
(rpm)
cpe:/a:redhat:source_to_image:1.6::el8 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260689 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787262214 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787260663 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.11 |
Unaffected:
1787263584 , < *
(rpm)
cpe:/a:redhat:acm:2.11::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784677172 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784638644 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1784590741 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259106 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259284 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787259310 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.13 |
Unaffected:
1787263693 , < *
(rpm)
cpe:/a:redhat:acm:2.13::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787183407 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1786976940 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787172840 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.14 |
Unaffected:
1787170830 , < *
(rpm)
cpe:/a:redhat:acm:2.14::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547792 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786547807 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.15 |
Unaffected:
1786549537 , < *
(rpm)
cpe:/a:redhat:acm:2.15::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787252179 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242135 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242105 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.16 |
Unaffected:
1787242321 , < *
(rpm)
cpe:/a:redhat:acm:2.16::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787243221 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242131 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242099 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1787242108 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2.17 |
Unaffected:
1788105072 , < *
(rpm)
cpe:/a:redhat:acm:2.17::el9 |
||
| Red Hat | Red Hat Ansible Automation Platform 2.7 |
Unaffected:
1783917963 , < *
(rpm)
cpe:/a:redhat:ansible_automation_platform:2.7::el9 |
||
| Red Hat | Red Hat Developer Hub 1.9 |
Unaffected:
1782767215 , < *
(rpm)
cpe:/a:redhat:rhdh:1.9::el9 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.25.11-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Hardened Images |
Unaffected:
1.26.4-2.hum1 , < *
(rpm)
cpe:/a:redhat:hummingbird:1 |
||
| Red Hat | Red Hat Lightspeed (formerly Insights) for Runtimes 1.0 |
Unaffected:
1786483782 , < *
(rpm)
cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9 |
||
| Red Hat | Red Hat OpenShift AI 2.25 |
Unaffected:
1784004914 , < *
(rpm)
cpe:/a:redhat:openshift_ai:2.25::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.7.3 |
Unaffected:
1783057868 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.7::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1784121108 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Builds 1.8.1 |
Unaffected:
1783612119 , < *
(rpm)
cpe:/a:redhat:openshift_builds:1.8::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.17 |
Unaffected:
1787554347 , < *
(rpm)
cpe:/a:redhat:openshift:4.17::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.18 |
Unaffected:
1786754425 , < *
(rpm)
cpe:/a:redhat:openshift:4.18::el9 |
||
| Red Hat | Red Hat OpenShift Container Platform 4.21 |
Unaffected:
1786526139 , < *
(rpm)
cpe:/a:redhat:openshift:4.21::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.2 |
Unaffected:
1785704636 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift distributed tracing 3.10.2 |
Unaffected:
1785704547 , < *
(rpm)
cpe:/a:redhat:openshift_distributed_tracing:3.10::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885742 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784885559 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784908682 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.0 |
Unaffected:
1784917979 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.0::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885281 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784885133 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784953556 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.1 |
Unaffected:
1784918113 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.1::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921753 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784921772 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784953743 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.2 |
Unaffected:
1784918117 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.2::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885810 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784885681 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1784908639 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.3 |
Unaffected:
1785316150 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.3::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131046 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131063 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785131291 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat OpenShift Service Mesh 3.4 |
Unaffected:
1785317214 , < *
(rpm)
cpe:/a:redhat:service_mesh:3.4::el9 |
||
| Red Hat | Red Hat Trusted Artifact Signer 1.4 |
Unaffected:
4-1.4.2 , < *
(rpm)
Unaffected: 4-1.4.3 , < * (rpm) cpe:/a:redhat:trusted_artifact_signer:1.4::el9 |
||
| Red Hat | Red Hat Web Terminal 1.11 |
Unaffected:
1784296203 , < *
(rpm)
cpe:/a:redhat:webterminal:1.11::el9 |
||
| Red Hat | Red Hat Web Terminal 1.12 |
Unaffected:
1784247610 , < *
(rpm)
cpe:/a:redhat:webterminal:1.12::el9 |
||
| Red Hat | Red Hat Web Terminal 1.13 |
Unaffected:
1784296127 , < *
(rpm)
cpe:/a:redhat:webterminal:1.13::el9 |
||
| Red Hat | Red Hat Web Terminal 1.14 |
Unaffected:
1784296114 , < *
(rpm)
cpe:/a:redhat:webterminal:1.14::el9 |
||
| Red Hat | Red Hat Web Terminal 1.15 |
Unaffected:
1784296033 , < *
(rpm)
cpe:/a:redhat:webterminal:1.15::el9 |
||
| Red Hat | Red Hat Web Terminal 1.16 |
Unaffected:
1786654871 , < *
(rpm)
cpe:/a:redhat:webterminal:1.16::el9 |
||
| Red Hat | Assisted Installer for Red Hat OpenShift Container Platform 2 |
cpe:/a:redhat:assisted_installer:2
|
||
| Red Hat | Confidential Compute Attestation |
cpe:/a:redhat:confidential_compute_attestation:1
|
||
| Red Hat | Cryostat 4 |
cpe:/a:redhat:cryostat:4
|
||
| Red Hat | Custom Metric Autoscaler operator for Red Hat Openshift |
cpe:/a:redhat:openshift_custom_metrics_autoscaler:2
|
||
| Red Hat | Deployment Validation Operator |
cpe:/a:redhat:deployment_validator_operator
|
||
| Red Hat | ExternalDNS Operator |
cpe:/a:redhat:ext_dns_optr:1
|
||
| Red Hat | Fence Agents Remediation Operator |
cpe:/a:redhat:workload_availability_far:0
|
||
| Red Hat | File Integrity Operator |
cpe:/a:redhat:openshift_file_integrity_operator:1
|
||
| Red Hat | Gatekeeper 3 |
cpe:/a:redhat:gatekeeper:3
|
||
| Red Hat | Logging Subsystem for Red Hat OpenShift |
cpe:/a:redhat:logging:6
|
||
| Red Hat | Logical Volume Manager Storage |
cpe:/a:redhat:lvms:4
|
||
| Red Hat | Machine Deletion Remediation Operator |
cpe:/a:redhat:workload_availability_mdr:0
|
||
| Red Hat | Migration Toolkit for Applications 8 |
cpe:/a:redhat:migration_toolkit_applications:8
|
||
| Red Hat | Migration Toolkit for Containers |
cpe:/a:redhat:rhmt:1
|
||
| Red Hat | mirror registry for Red Hat OpenShift 2 |
cpe:/a:redhat:mirror_registry:2
|
||
| Red Hat | Multiarch Tuning Operator |
cpe:/a:redhat:multiarch_tuning_operator
|
||
| Red Hat | Multicluster Engine for Kubernetes |
cpe:/a:redhat:multicluster_engine
|
||
| Red Hat | Network Observability Operator |
cpe:/a:redhat:network_observ_optr:1
|
||
| Red Hat | Node HealthCheck Operator |
cpe:/a:redhat:workload_availability_nhc:0
|
||
| Red Hat | OpenShift Developer Tools and Services |
cpe:/a:redhat:ocp_tools
|
||
| Red Hat | OpenShift Lightspeed |
cpe:/a:redhat:openshift_lightspeed
|
||
| Red Hat | OpenShift Pipelines |
cpe:/a:redhat:openshift_pipelines:1
|
||
| Red Hat | OpenShift Serverless |
cpe:/a:redhat:serverless:1
|
||
| Red Hat | OpenShift Service Mesh 2 |
cpe:/a:redhat:service_mesh:2
|
||
| Red Hat | OpenShift Service Mesh 3 |
cpe:/a:redhat:service_mesh:3
|
||
| Red Hat | Power monitoring for Red Hat OpenShift |
cpe:/a:redhat:openshift_power_monitoring
|
||
| Red Hat | Red Hat 3scale API Management Platform 2 |
cpe:/a:redhat:red_hat_3scale_amp:2
|
||
| Red Hat | Red Hat Advanced Cluster Management for Kubernetes 2 |
cpe:/a:redhat:acm:2
|
||
| Red Hat | Red Hat Advanced Cluster Security 4 |
cpe:/a:redhat:advanced_cluster_security:4
|
||
| Red Hat | Red Hat Ansible Automation Platform 2 |
cpe:/a:redhat:ansible_automation_platform:2
|
||
| Red Hat | Red Hat Ceph Storage 5 |
cpe:/a:redhat:ceph_storage:5
|
||
| Red Hat | Red Hat Ceph Storage 6 |
cpe:/a:redhat:ceph_storage:6
|
||
| Red Hat | Red Hat Ceph Storage 7 |
cpe:/a:redhat:ceph_storage:7
|
||
| Red Hat | Red Hat Ceph Storage 8 |
cpe:/a:redhat:ceph_storage:8
|
||
| Red Hat | Red Hat Ceph Storage 9 |
cpe:/a:redhat:ceph_storage:9
|
||
| Red Hat | Red Hat Connectivity Link 1 |
cpe:/a:redhat:connectivity_link:1
|
||
| Red Hat | Red Hat Edge Manager 1 |
cpe:/a:redhat:edge_manager:1
|
||
| Red Hat | Red Hat Enterprise Linux 10 |
cpe:/o:redhat:enterprise_linux:10
|
||
| Red Hat | Red Hat Enterprise Linux 7 |
cpe:/o:redhat:enterprise_linux:7
|
||
| Red Hat | Red Hat Enterprise Linux 8 |
cpe:/o:redhat:enterprise_linux:8
|
||
| Red Hat | Red Hat Enterprise Linux 9 |
cpe:/o:redhat:enterprise_linux:9
|
||
| Red Hat | Red Hat Enterprise Linux AI (RHEL AI) 3 |
cpe:/a:redhat:enterprise_linux_ai:3
|
||
| Red Hat | Red Hat OpenShift AI (RHOAI) |
cpe:/a:redhat:openshift_ai
|
||
| Red Hat | Red Hat OpenShift Cluster Manager CLI |
cpe:/a:redhat:openshift_cluster_manager_cli:1
|
||
| Red Hat | Red Hat OpenShift Container Platform 4 |
cpe:/a:redhat:openshift:4
|
||
| Red Hat | Red Hat Openshift Data Foundation 4 |
cpe:/a:redhat:openshift_data_foundation:4
|
||
| Red Hat | Red Hat OpenShift Dev Spaces |
cpe:/a:redhat:openshift_devspaces:3
|
||
| Red Hat | Red Hat OpenShift Dev Workspaces Operator |
cpe:/a:redhat:devworkspace
|
||
| Red Hat | Red Hat OpenShift distributed tracing 3 |
cpe:/a:redhat:openshift_distributed_tracing:3
|
||
| Red Hat | Red Hat OpenShift for Windows Containers |
cpe:/a:redhat:windows_machine_config
|
||
| Red Hat | Red Hat OpenShift GitOps |
cpe:/a:redhat:openshift_gitops:1
|
||
| Red Hat | Red Hat OpenShift on AWS |
cpe:/a:redhat:openshift_service_on_aws:1
|
||
| Red Hat | Red Hat OpenShift Virtualization 4 |
cpe:/a:redhat:container_native_virtualization:4
|
||
| Red Hat | Red Hat OpenStack Platform 16.2 |
cpe:/a:redhat:openstack:16.2
|
||
| Red Hat | Red Hat OpenStack Platform 17.1 |
cpe:/a:redhat:openstack:17.1
|
||
| Red Hat | Red Hat OpenStack Platform 18.0 |
cpe:/a:redhat:openstack:18.0
|
||
| Red Hat | Red Hat Quay 3 |
cpe:/a:redhat:quay:3
|
||
| Red Hat | Red Hat Satellite 6 |
cpe:/a:redhat:satellite:6
|
||
| Red Hat | Red Hat Service Interconnect 2 |
cpe:/a:redhat:service_interconnect:2
|
||
| Red Hat | Security Profiles Operator |
cpe:/a:redhat:openshift_security_profiles_operator:1
|
||
| Red Hat | Service Telemetry Framework 1.5 |
cpe:/a:redhat:stf:1.5
|
||
| Red Hat | streams for Apache Kafka 2 |
cpe:/a:redhat:amq_streams:2
|
||
| Red Hat | Zero Trust Workload Identity Manager |
cpe:/a:redhat:zero_trust_workload_identity_manager:1
|
||
| Red Hat | Zero Trust Workload Identity Manager - Tech Preview |
cpe:/a:redhat:zero_trust_workload_identity_manager:0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"version": "3.1"
}
},
{
"other": {
"content": {
"id": "CVE-2026-27145",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-06-04T12:34:03.859208Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-06-04T12:34:53.136Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
},
{
"affected": [
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el8"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el8ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.5::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.5 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.7-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.6 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el10"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el10ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "receptor",
"product": "Red Hat Ansible Automation Platform 2.7 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.6.6-1.el9ap",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-openprinting-ipp-usb",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.9.27-7.el10_2.2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.8-6.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.9.2-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.10-1.el10_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-client",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.0-4.el10_2.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10.2"
],
"defaultStatus": "affected",
"packageName": "go-fdo-server",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.0.1-2.el10_2.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "yggdrasil",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.4.7-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.3.2-5.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux_eus:10.0"
],
"defaultStatus": "affected",
"packageName": "rhc-worker-playbook",
"product": "Red Hat Enterprise Linux 10.0 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.3-6.el10_0",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:rhel_els:7"
],
"defaultStatus": "affected",
"packageName": "host-metering",
"product": "Red Hat Enterprise Linux 7 Extended Lifecycle Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.4.0-8.el7_9",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "go-toolset:rhel8",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "8100020260710105056.a3795dee",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:8"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.5-9.el8_10",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.4-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "2:1.22.2-7.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-8.el9_8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.2-1.el9_2.4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.2"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_2",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_e4s:9.4"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.4-9.el9_4",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:1.26.5-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "opentelemetry-collector",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.152.1-1.el9_6",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhel_eus:9.6"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 9.6 Extended Update Support",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1:0.2.7-1.el9_6.5",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el8"
],
"defaultStatus": "affected",
"packageName": "butane",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.23.0-5.rhaos4.18.el8",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2::el8"
],
"defaultStatus": "affected",
"packageName": "collectd-sensubility",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.2.1-1.1.el8ost",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el8"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el8sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.16::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.16 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.17::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.17 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.18::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.18 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6.19::el9"
],
"defaultStatus": "affected",
"packageName": "yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6.19 for RHEL 9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "0:0.0.4-1.el9sat",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "golang-github",
"product": "Streams for Apache Kafka 3.2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "danielqsj-kafka_exporter",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cert_manager:1.19::el9"
],
"defaultStatus": "affected",
"packageName": "cert-manager/jetstack-cert-manager-rhel9",
"product": "Cert Manager support for Red Hat OpenShift release 1.19",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786613805",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:cluster_observability_operator:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "cluster-observability-operator/perses-rhel9",
"product": "Cluster Observability Operator 1.5.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787593946",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_compliance_operator:1::el9"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "Compliance Operator 1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786380082",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:external_secrets_operator:1.1::el9"
],
"defaultStatus": "affected",
"packageName": "external-secrets-operator/external-secrets-rhel9",
"product": "external secrets operator for Red Hat OpenShift 1.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786614676",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549223",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201612",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764622",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.10::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176886",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911941",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911952",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911945",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786912006",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911973",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786911984",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786907276",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787238383",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239116",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787239595",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786577950",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786750700",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786983362",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786664288",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259112",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787264185",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259740",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.6",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260821",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/backplane-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784737366",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hypershift-addon-rhel9-operator",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784738758",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/kube-rbac-proxy-mce-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677239",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/addon-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259015",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259059",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259011",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259016",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterlifecycle-state-metrics-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787258993",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/managedcluster-import-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259044",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/multicloud-manager-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259047",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/placement-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-operator-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259126",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/registration-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/work-rhel9",
"product": "multicluster engine for Kubernetes 2.8",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/clusterclaims-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787195995",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-curator-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787201646",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/cluster-image-set-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786764601",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_engine:2.9::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/provider-credential-controller-rhel9",
"product": "multicluster engine for Kubernetes 2.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787176716",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.4.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784061472",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.6::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.6.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784152046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.7.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784768332",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "1785775948",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:multicluster_globalhub:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "multicluster-globalhub/multicluster-globalhub-agent-rhel9",
"product": "Multicluster Global Hub 1.8.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785763319",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
],
"defaultStatus": "affected",
"packageName": "oadp/oadp-velero-rhel9",
"product": "OpenShift API for Data Protection 1.5",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1788860461",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel8",
"product": "OpenShift Developer Tools and Services 1.6.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784727697",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:source_to_image:1.6::el8"
],
"defaultStatus": "affected",
"packageName": "source-to-image/source-to-image-rhel9",
"product": "OpenShift Developer Tools and Services 1.6.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784728036",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260689",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787262214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787260663",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.11::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263584",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/kube-rbac-proxy-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784677172",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multiclusterhub-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784638644",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-observability-rhel9-operator",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784590741",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259106",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259284",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787259310",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.13::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787263693",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787183407",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786976940",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787172840",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.14::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787170830",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547792",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786547807",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.15::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786549537",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787252179",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242135",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242105",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.16::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242321",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicloud-integrations-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787243221",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-application-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242131",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-channel-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242099",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/multicluster-operators-subscription-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787242108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:acm:2.17::el9"
],
"defaultStatus": "affected",
"packageName": "rhacm2/subctl-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1788105072",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2.7::el9"
],
"defaultStatus": "affected",
"packageName": "ansible-automation-platform-27/receptor-rhel9",
"product": "Red Hat Ansible Automation Platform 2.7",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783917963",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:rhdh:1.9::el9"
],
"defaultStatus": "affected",
"packageName": "rhdh/rhdh-rhel9-operator",
"product": "Red Hat Developer Hub 1.9",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1782767215",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-25-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.25.11-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:hummingbird:1"
],
"defaultStatus": "affected",
"packageName": "golang1-26-main",
"product": "Red Hat Hardened Images",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1.26.4-2.hum1",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9"
],
"defaultStatus": "affected",
"packageName": "rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator",
"product": "Red Hat Lightspeed (formerly Insights) for Runtimes 1.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786483782",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
],
"defaultStatus": "affected",
"packageName": "rhoai/odh-rhel9-operator",
"product": "Red Hat OpenShift AI 2.25",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784004914",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.7::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.7.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783057868",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-rhel9-operator",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784121108",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_builds:1.8::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-builds/openshift-builds-waiters-rhel9",
"product": "Red Hat OpenShift Builds 1.8.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1783612119",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.17::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.17",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1787554347",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.18::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.18",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786754425",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift:4.21::el9"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-rhel9-operator",
"product": "Red Hat OpenShift Container Platform 4.21",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786526139",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-collector-rhel9",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704636",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9"
],
"defaultStatus": "affected",
"packageName": "rhosdt/opentelemetry-rhel9-operator",
"product": "Red Hat OpenShift distributed tracing 3.10.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785704547",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885742",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885559",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908682",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.0::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.0",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784917979",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885281",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885133",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953556",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.1::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.1",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918113",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921753",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784921772",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784953743",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.2::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.2",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784918117",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885810",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784885681",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784908639",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.3::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.3",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785316150",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-cni-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131046",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-pilot-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131063",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-proxyv2-rhel9",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785131291",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:service_mesh:3.4::el9"
],
"defaultStatus": "affected",
"packageName": "openshift-service-mesh/istio-rhel9-operator",
"product": "Red Hat OpenShift Service Mesh 3.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1785317214",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:trusted_artifact_signer:1.4::el9"
],
"defaultStatus": "affected",
"packageName": "conforma-cli-stack-v1",
"product": "Red Hat Trusted Artifact Signer 1.4",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.2",
"versionType": "rpm"
},
{
"lessThan": "*",
"status": "unaffected",
"version": "4-1.4.3",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.11::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.11",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296203",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.12::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.12",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784247610",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.13::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.13",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296127",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.14::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.14",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296114",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.15::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.15",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1784296033",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://catalog.redhat.com/software/containers/",
"cpes": [
"cpe:/a:redhat:webterminal:1.16::el9"
],
"defaultStatus": "affected",
"packageName": "web-terminal/web-terminal-exec-rhel9",
"product": "Red Hat Web Terminal 1.16",
"vendor": "Red Hat",
"versions": [
{
"lessThan": "*",
"status": "unaffected",
"version": "1786654871",
"versionType": "rpm"
}
]
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:assisted_installer:2"
],
"defaultStatus": "affected",
"packageName": "rhai/assisted-installer-rhel9",
"product": "Assisted Installer for Red Hat OpenShift Container Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "unaffected",
"packageName": "build-of-trustee/trustee-rhel9-operator",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:confidential_compute_attestation:1"
],
"defaultStatus": "affected",
"packageName": "openshift-sandboxed-containers/osc-monitor-rhel9",
"product": "Confidential Compute Attestation",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:cryostat:4"
],
"defaultStatus": "unaffected",
"packageName": "cryostat/cryostat-storage-rhel9",
"product": "Cryostat 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2"
],
"defaultStatus": "unaffected",
"packageName": "custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9",
"product": "Custom Metric Autoscaler operator for Red Hat Openshift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:deployment_validator_operator"
],
"defaultStatus": "affected",
"packageName": "dvo/deployment-validation-rhel8-operator",
"product": "Deployment Validation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ext_dns_optr:1"
],
"defaultStatus": "affected",
"packageName": "edo/external-dns-rhel9-operator",
"product": "ExternalDNS Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_far:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/fence-agents-remediation-rhel8-operator",
"product": "Fence Agents Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_file_integrity_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-compliance-operator-bundle",
"product": "File Integrity Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:gatekeeper:3"
],
"defaultStatus": "unaffected",
"packageName": "gatekeeper/gatekeeper-rhel9-operator",
"product": "Gatekeeper 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:logging:6"
],
"defaultStatus": "unaffected",
"packageName": "openshift-logging/eventrouter-rhel9",
"product": "Logging Subsystem for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/lvms-rhel9-operator",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel8",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:lvms:4"
],
"defaultStatus": "unaffected",
"packageName": "lvms4/topolvm-rhel9",
"product": "Logical Volume Manager Storage",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_mdr:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/machine-deletion-remediation-rhel8-operator",
"product": "Machine Deletion Remediation Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:migration_toolkit_applications:8"
],
"defaultStatus": "unaffected",
"packageName": "mta/mta-cli-rhel9",
"product": "Migration Toolkit for Applications 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:rhmt:1"
],
"defaultStatus": "affected",
"packageName": "rhmtc/openshift-migration-registry-rhel8",
"product": "Migration Toolkit for Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:mirror_registry:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift/mirror-registry-rhel8",
"product": "mirror registry for Red Hat OpenShift 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multiarch_tuning_operator"
],
"defaultStatus": "affected",
"packageName": "multiarch-tuning/multiarch-tuning-rhel9-operator",
"product": "Multiarch Tuning Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/assisted-service-9-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "unaffected",
"packageName": "multicluster-engine/discovery-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/hive-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:multicluster_engine"
],
"defaultStatus": "affected",
"packageName": "multicluster-engine/maestro-rhel9",
"product": "Multicluster Engine for Kubernetes",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:network_observ_optr:1"
],
"defaultStatus": "affected",
"packageName": "network-observability/network-observability-cli-rhel9",
"product": "Network Observability Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:workload_availability_nhc:0"
],
"defaultStatus": "affected",
"packageName": "workload-availability/node-healthcheck-rhel8-operator",
"product": "Node HealthCheck Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ocp_tools"
],
"defaultStatus": "unaffected",
"packageName": "helm",
"product": "OpenShift Developer Tools and Services",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_lightspeed"
],
"defaultStatus": "affected",
"packageName": "openshift-lightspeed/lightspeed-rhel9-operator",
"product": "OpenShift Lightspeed",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines-client",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_pipelines:1"
],
"defaultStatus": "affected",
"packageName": "openshift-pipelines/pipelines-scheduler-rhel9",
"product": "OpenShift Pipelines",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "kn-workflow-plugin",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/kn-plugin-event-sender-rhel9",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-serverless-1/logic-rhel9-operator",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:serverless:1"
],
"defaultStatus": "affected",
"packageName": "openshift-serverless-clients",
"product": "OpenShift Serverless",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel8",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:2"
],
"defaultStatus": "unaffected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "OpenShift Service Mesh 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_mesh:3"
],
"defaultStatus": "unaffected",
"packageName": "openshift-service-mesh/kiali-rhel9",
"product": "OpenShift Service Mesh 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_power_monitoring"
],
"defaultStatus": "affected",
"packageName": "openshift-power-monitoring/kepler-rhel9",
"product": "Power monitoring for Red Hat OpenShift",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "unaffected",
"packageName": "3scale-amp2/3scale-rhel7-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:red_hat_3scale_amp:2"
],
"defaultStatus": "affected",
"packageName": "3scale-amp2/3scale-rhel9-operator",
"product": "Red Hat 3scale API Management Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/acm-governance-policy-framework-addon-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/acm-volsync-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/config-policy-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/governance-policy-propagator-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "affected",
"packageName": "rhacm2/klusterlet-addon-controller-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:acm:2"
],
"defaultStatus": "unaffected",
"packageName": "rhacm2/thanos-rhel9",
"product": "Red Hat Advanced Cluster Management for Kubernetes 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel8",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:advanced_cluster_security:4"
],
"defaultStatus": "unaffected",
"packageName": "advanced-cluster-security/rhacs-main-rhel9",
"product": "Red Hat Advanced Cluster Security 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "ansible-automation-platform/platform-operator-bundle",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl30",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "automation-gateway-proxy-openssl32",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.11-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-galaxy-ng",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3.12-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python3x-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ansible_automation_platform:2"
],
"defaultStatus": "unaffected",
"packageName": "python-grpcio",
"product": "Red Hat Ansible Automation Platform 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:5"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel8",
"product": "Red Hat Ceph Storage 5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:6"
],
"defaultStatus": "affected",
"packageName": "rhceph/snmp-notifier-rhel9",
"product": "Red Hat Ceph Storage 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:7"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:8"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/grafana-rhel9",
"product": "Red Hat Ceph Storage 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:ceph_storage:9"
],
"defaultStatus": "unaffected",
"packageName": "rhceph/alloy-rhel10",
"product": "Red Hat Ceph Storage 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/authorino-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:connectivity_link:1"
],
"defaultStatus": "affected",
"packageName": "rhcl-1/coredns-rhel9",
"product": "Red Hat Connectivity Link 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "flightctl",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:edge_manager:1"
],
"defaultStatus": "affected",
"packageName": "rhem/flightctl-ui-rhel9",
"product": "Red Hat Edge Manager 1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "delve",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10/bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "rhel10-eus/rhel-10.0-bootc-image-builder",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:10"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 10",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "affected",
"packageName": "rhc",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:7"
],
"defaultStatus": "unaffected",
"packageName": "rhc-worker-script",
"product": "Red Hat Enterprise Linux 7",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/buildah",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/conmon",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/containernetworking-plugins",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/podman",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/runc",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/skopeo",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "container-tools:rhel8/toolbox",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:8"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 8",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "buildah",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "butane",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "containernetworking-plugins",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "git-lfs",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "grafana-pcp",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "affected",
"packageName": "gvisor-tap-vsock",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "osbuild-composer",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9/bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "rhel9-eus/rhel-9.6-bootc-image-builder",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "toolbox",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "trustee-guest-components",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/o:redhat:enterprise_linux:9"
],
"defaultStatus": "unaffected",
"packageName": "weldr-client",
"product": "Red Hat Enterprise Linux 9",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:enterprise_linux_ai:3"
],
"defaultStatus": "affected",
"packageName": "golang",
"product": "Red Hat Enterprise Linux AI (RHEL AI) 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "unaffected",
"packageName": "rhoai/odh-rhel8-operator",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_ai"
],
"defaultStatus": "affected",
"packageName": "rhoai/rhai-cli-rhel9",
"product": "Red Hat OpenShift AI (RHOAI)",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_cluster_manager_cli:1"
],
"defaultStatus": "affected",
"packageName": "ocm-cli-clients/ocm-cli-rhel9",
"product": "Red Hat OpenShift Cluster Manager CLI",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "conmon-rs",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "containernetworking-plugins",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-o",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "cri-tools",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "golang-github-prometheus-promu",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ignition",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "kata-containers",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "microshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/frr-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-ansible-operator",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift4/ose-cli",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "openshift4/ose-hypershift-rhel9",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-clients",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "openshift-kuryr",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-aws-ecr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-azure-acr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-crio-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "ose-gcp-gcr-image-credential-provider",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "podman",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "runc",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift:4"
],
"defaultStatus": "unaffected",
"packageName": "skopeo",
"product": "Red Hat OpenShift Container Platform 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_data_foundation:4"
],
"defaultStatus": "unaffected",
"packageName": "odf4/cephcsi-rhel9",
"product": "Red Hat Openshift Data Foundation 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_devspaces:3"
],
"defaultStatus": "unaffected",
"packageName": "devspaces/udi-rhel9",
"product": "Red Hat OpenShift Dev Spaces",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:devworkspace"
],
"defaultStatus": "affected",
"packageName": "devworkspace/devworkspace-rhel9-operator",
"product": "Red Hat OpenShift Dev Workspaces Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_distributed_tracing:3"
],
"defaultStatus": "unaffected",
"packageName": "rhosdt/tempo-rhel9",
"product": "Red Hat OpenShift distributed tracing 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:windows_machine_config"
],
"defaultStatus": "unaffected",
"packageName": "openshift4-wincw/windows-machine-config-rhel9-operator",
"product": "Red Hat OpenShift for Windows Containers",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel8",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_gitops:1"
],
"defaultStatus": "unaffected",
"packageName": "openshift-gitops-1/dex-rhel9",
"product": "Red Hat OpenShift GitOps",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_service_on_aws:1"
],
"defaultStatus": "affected",
"packageName": "rosa",
"product": "Red Hat OpenShift on AWS",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-apiserver-proxy-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "container-native-virtualization/kubevirt-redfish-rhel9",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "unaffected",
"packageName": "kubevirt",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:container_native_virtualization:4"
],
"defaultStatus": "affected",
"packageName": "rh-osbs/openshift-golang-builder",
"product": "Red Hat OpenShift Virtualization 4",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:16.2"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 16.2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "collectd-libpod-stats",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "unaffected",
"packageName": "etcd",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "golang-github-infrawatch-apputils",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:17.1"
],
"defaultStatus": "affected",
"packageName": "rhosp-rhel9/osp-director-agent",
"product": "Red Hat OpenStack Platform 17.1",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "golang-github-openstack-k8s-operators-os-diff",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openstack:18.0"
],
"defaultStatus": "affected",
"packageName": "rhoso-operators/sg-core-rhel9",
"product": "Red Hat OpenStack Platform 18.0",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel8",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:quay:3"
],
"defaultStatus": "unaffected",
"packageName": "quay/quay-rhel9",
"product": "Red Hat Quay 3",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "affected",
"packageName": "satellite:el8/yggdrasil-worker-forwarder",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:satellite:6"
],
"defaultStatus": "unaffected",
"packageName": "satellite/iop-vmaas-rhel9",
"product": "Red Hat Satellite 6",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:service_interconnect:2"
],
"defaultStatus": "unaffected",
"packageName": "skupper-cli",
"product": "Red Hat Service Interconnect 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:openshift_security_profiles_operator:1"
],
"defaultStatus": "affected",
"packageName": "compliance/openshift-selinuxd-rhel8",
"product": "Security Profiles Operator",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:stf:1.5"
],
"defaultStatus": "unaffected",
"packageName": "stf/sg-core-rhel9",
"product": "Service Telemetry Framework 1.5",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:amq_streams:2"
],
"defaultStatus": "affected",
"packageName": "golang-github-danielqsj-kafka_exporter",
"product": "streams for Apache Kafka 2",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:1"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9",
"product": "Zero Trust Workload Identity Manager",
"vendor": "Red Hat"
},
{
"collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
"cpes": [
"cpe:/a:redhat:zero_trust_workload_identity_manager:0"
],
"defaultStatus": "affected",
"packageName": "zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9",
"product": "Zero Trust Workload Identity Manager - Tech Preview",
"vendor": "Red Hat"
}
],
"datePublic": "2026-06-02T22:01:36.954Z",
"descriptions": [
{
"lang": "en",
"value": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates."
}
],
"metrics": [
{
"other": {
"content": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"value": "Important"
},
"type": "Red Hat severity rating"
}
},
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"format": "CVSS"
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-606",
"description": "Unchecked Input for Loop Condition",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-09-11T12:09:12.800Z",
"orgId": "0b0ca135-0b70-47e7-9f44-1890c2a1c46c",
"shortName": "redhat-SADP"
},
"references": [
{
"tags": [
"vdb-entry",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"name": "RHBZ#2484207",
"tags": [
"issue-tracking",
"x_refsource_REDHAT"
],
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"tags": [
"x_sadp-csaf-vex"
],
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53416"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54757"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57482"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42082"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53413"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53374"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54168"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51187"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46394"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:46395"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29980"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:35832"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34357"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39005"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:38995"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60354"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57649"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53412"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60315"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53415"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54401"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:29981"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:34359"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:39879"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36317"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54531"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54500"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41030"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:53530"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60387"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60390"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60388"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54427"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60391"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60386"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54441"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36648"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:41036"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:60025"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57488"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54603"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49705"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49729"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49744"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:36797"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:55899"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54435"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54525"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:57194"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59556"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59593"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59557"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:54432"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59579"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59558"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"tags": [
"vendor-advisory",
"x_refsource_REDHAT"
],
"url": "https://access.redhat.com/errata/RHSA-2026:59559"
}
],
"solutions": [
{
"lang": "en",
"value": "RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)"
},
{
"lang": "en",
"value": "RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:54757: Red Hat OpenStack Platform 16.2"
},
{
"lang": "en",
"value": "RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9"
},
{
"lang": "en",
"value": "RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)"
},
{
"lang": "en",
"value": "RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)"
},
{
"lang": "en",
"value": "RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)"
},
{
"lang": "en",
"value": "RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)"
},
{
"lang": "en",
"value": "RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)"
},
{
"lang": "en",
"value": "RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)"
},
{
"lang": "en",
"value": "RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)"
},
{
"lang": "en",
"value": "RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19"
},
{
"lang": "en",
"value": "RHSA-2026:61314: Cluster Observability Operator 1.5.0"
},
{
"lang": "en",
"value": "RHSA-2026:54500: Compliance Operator 1"
},
{
"lang": "en",
"value": "RHSA-2026:41030: Multicluster Global Hub 1.4.5"
},
{
"lang": "en",
"value": "RHSA-2026:44622: Multicluster Global Hub 1.6.5"
},
{
"lang": "en",
"value": "RHSA-2026:47149: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:53530: Multicluster Global Hub 1.7.0"
},
{
"lang": "en",
"value": "RHSA-2026:52946: Multicluster Global Hub 1.8.0"
},
{
"lang": "en",
"value": "RHSA-2026:66022: OpenShift API for Data Protection 1.5"
},
{
"lang": "en",
"value": "RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3"
},
{
"lang": "en",
"value": "RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13"
},
{
"lang": "en",
"value": "RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14"
},
{
"lang": "en",
"value": "RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15"
},
{
"lang": "en",
"value": "RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16"
},
{
"lang": "en",
"value": "RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7"
},
{
"lang": "en",
"value": "RHSA-2026:33574: Red Hat Developer Hub 1.9"
},
{
"lang": "en",
"value": "RHSA-2026:23262: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:23264: Red Hat Hardened Images"
},
{
"lang": "en",
"value": "RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0"
},
{
"lang": "en",
"value": "RHSA-2026:42644: Red Hat OpenShift AI 2.25"
},
{
"lang": "en",
"value": "RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3"
},
{
"lang": "en",
"value": "RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1"
},
{
"lang": "en",
"value": "RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17"
},
{
"lang": "en",
"value": "RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18"
},
{
"lang": "en",
"value": "RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21"
},
{
"lang": "en",
"value": "RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0"
},
{
"lang": "en",
"value": "RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1"
},
{
"lang": "en",
"value": "RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2"
},
{
"lang": "en",
"value": "RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3"
},
{
"lang": "en",
"value": "RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4"
},
{
"lang": "en",
"value": "RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2"
},
{
"lang": "en",
"value": "RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4"
},
{
"lang": "en",
"value": "RHSA-2026:42043: Red Hat Web Terminal 1.11"
},
{
"lang": "en",
"value": "RHSA-2026:42047: Red Hat Web Terminal 1.12"
},
{
"lang": "en",
"value": "RHSA-2026:42050: Red Hat Web Terminal 1.13"
},
{
"lang": "en",
"value": "RHSA-2026:42051: Red Hat Web Terminal 1.14"
},
{
"lang": "en",
"value": "RHSA-2026:42049: Red Hat Web Terminal 1.15"
},
{
"lang": "en",
"value": "RHSA-2026:55899: Red Hat Web Terminal 1.16"
},
{
"lang": "en",
"value": "RHSA-2026:54435: Streams for Apache Kafka 3.2.1"
},
{
"lang": "en",
"value": "RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1"
},
{
"lang": "en",
"value": "RHSA-2026:57194: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59556: multicluster engine for Kubernetes 2.11"
},
{
"lang": "en",
"value": "RHSA-2026:59593: multicluster engine for Kubernetes 2.17"
},
{
"lang": "en",
"value": "RHSA-2026:59557: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:54432: multicluster engine for Kubernetes 2.1"
},
{
"lang": "en",
"value": "RHSA-2026:59579: multicluster engine for Kubernetes 2.6"
},
{
"lang": "en",
"value": "RHSA-2026:59558: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:47735: multicluster engine for Kubernetes 2.8"
},
{
"lang": "en",
"value": "RHSA-2026:59559: multicluster engine for Kubernetes 2.9"
}
],
"timeline": [
{
"lang": "en",
"time": "2026-06-02T23:01:08.992Z",
"value": "Reported to Red Hat."
},
{
"lang": "en",
"time": "2026-06-02T22:01:36.954Z",
"value": "Made public."
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"workarounds": [
{
"lang": "en",
"value": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037)."
}
],
"x_adpType": "supplier",
"x_generator": {
"engine": "sadp-cli 1.0.0"
}
}
],
"cna": {
"affected": [
{
"collectionURL": "https://pkg.go.dev",
"defaultStatus": "unaffected",
"packageName": "crypto/x509",
"product": "crypto/x509",
"programRoutines": [
{
"name": "HostnameError.Error"
},
{
"name": "matchHostnames"
},
{
"name": "Certificate.Verify"
},
{
"name": "Certificate.VerifyHostname"
}
],
"vendor": "Go standard library",
"versions": [
{
"lessThan": "1.25.11",
"status": "affected",
"version": "0",
"versionType": "semver"
},
{
"lessThan": "1.26.4",
"status": "affected",
"version": "1.26.0-0",
"versionType": "semver"
}
]
}
],
"credits": [
{
"lang": "en",
"value": "Jakub Ciolek - https://ciolek.dev/"
}
],
"descriptions": [
{
"lang": "en",
"value": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates."
}
],
"problemTypes": [
{
"descriptions": [
{
"description": "CWE-407: Inefficient Algorithmic Complexity",
"lang": "en"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-06-02T22:01:36.954Z",
"orgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"shortName": "Go"
},
"references": [
{
"url": "https://go.dev/cl/783621"
},
{
"url": "https://go.dev/issue/79694"
},
{
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"title": "Inefficient candidate hostname parsing in crypto/x509"
}
},
"cveMetadata": {
"assignerOrgId": "1bb62c36-49e3-4200-9d77-64a1400537cc",
"assignerShortName": "Go",
"cveId": "CVE-2026-27145",
"datePublished": "2026-06-02T22:01:36.954Z",
"dateReserved": "2026-02-17T19:57:28.435Z",
"dateUpdated": "2026-09-11T12:09:12.800Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2",
"vulnerability-lookup:meta": {
"epss": {
"cve": "CVE-2026-27145",
"date": "2026-09-14",
"epss": "0.00591",
"percentile": "0.46435"
},
"microsoft_vex": {
"current_release_date": "2026-09-09T14:57:00.000Z",
"cve": "CVE-2026-27145",
"id": "msrc_CVE-2026-27145",
"initial_release_date": "2026-06-06T01:01:30.000Z",
"product_status:known_affected": "6",
"product_status:known_not_affected": "3",
"source": "Microsoft CSAF VEX",
"status": "final",
"title": "Inefficient candidate hostname parsing in crypto/x509",
"url": "https://msrc.microsoft.com/csaf/vex/2026/msrc_cve-2026-27145.json",
"version": "8"
},
"nvd": "{\"cve\":{\"id\":\"CVE-2026-27145\",\"sourceIdentifier\":\"security@golang.org\",\"published\":\"2026-06-02T23:16:35.570\",\"lastModified\":\"2026-09-11T13:17:23.340\",\"vulnStatus\":\"Awaiting Analysis\",\"cveTags\":[],\"descriptions\":[{\"lang\":\"en\",\"value\":\"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"},{\"lang\":\"es\",\"value\":\"(x509.Certificate).VerifyHostname previamente llamaba a matchHostnames en un bucle sobre todas las entradas de Nombres Alternativos del Sujeto (SAN) de DNS. Esto provoc\u00f3 que strings.Split(host, \\\".\\\") se ejecutara repetidamente en el mismo nombre de host de entrada. Con una lista SAN de DNS grande, los costos de verificaci\u00f3n escalaron cuadr\u00e1ticamente en funci\u00f3n del n\u00famero de entradas SAN multiplicado por el recuento de etiquetas del nombre de host. Debido a que x509.Verify valida los nombres de host antes de construir la cadena de certificados, esta sobrecarga ocurr\u00eda incluso para certificados no confiables.\"}],\"affected\":[{\"source\":\"security@golang.org\",\"affectedData\":[{\"vendor\":\"Go standard library\",\"product\":\"crypto/x509\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://pkg.go.dev\",\"packageName\":\"crypto/x509\",\"programRoutines\":[{\"name\":\"HostnameError.Error\"},{\"name\":\"matchHostnames\"},{\"name\":\"Certificate.Verify\"},{\"name\":\"Certificate.VerifyHostname\"}],\"versions\":[{\"version\":\"0\",\"lessThan\":\"1.25.11\",\"versionType\":\"semver\",\"status\":\"affected\"},{\"version\":\"1.26.0-0\",\"lessThan\":\"1.26.4\",\"versionType\":\"semver\",\"status\":\"affected\"}]}]},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"affectedData\":[{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"],\"versions\":[{\"version\":\"0:1.6.7-1.el8ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.5 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"],\"versions\":[{\"version\":\"0:1.6.7-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.6 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"],\"versions\":[{\"version\":\"0:1.6.6-1.el10ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"receptor\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"0:1.6.6-1.el9ap\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.26.4-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang-github-openprinting-ipp-usb\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.9.27-7.el10_2.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"1:0.3.8-6.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.4.9.2-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:0.2.10-1.el10_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.0-4.el10_2.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"go-fdo-server\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10.2\"],\"versions\":[{\"version\":\"0:1.0.1-2.el10_2.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.5-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:1.26.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.4.7-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"1:0.3.2-5.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.152.1-1.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10.0 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-playbook\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux_eus:10.0\"],\"versions\":[{\"version\":\"0:0.2.3-6.el10_0\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7 Extended Lifecycle Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"host-metering\",\"cpes\":[\"cpe:/o:redhat:rhel_els:7\"],\"versions\":[{\"version\":\"0:1.4.0-8.el7_9\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"go-toolset:rhel8\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"8100020260710105056.a3795dee\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:8\"],\"versions\":[{\"version\":\"1:0.2.5-9.el8_10\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:1.26.4-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"2:1.22.2-7.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux:9\"],\"versions\":[{\"version\":\"1:0.2.7-8.el9_8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"1:0.2.2-1.el9_2.4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.2\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_e4s:9.4\"],\"versions\":[{\"version\":\"1:0.2.4-9.el9_4\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:1.26.5-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"opentelemetry-collector\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"0:0.152.1-1.el9_6\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9.6 Extended Update Support\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/a:redhat:rhel_eus:9.6\"],\"versions\":[{\"version\":\"1:0.2.7-1.el9_6.5\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el8\"],\"versions\":[{\"version\":\"0:0.23.0-5.rhaos4.18.el8\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-sensubility\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2::el8\"],\"versions\":[{\"version\":\"0:0.2.1-1.1.el8ost\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el8\"],\"versions\":[{\"version\":\"0:0.0.4-1.el8sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.16 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.16::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.17 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.17::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.18 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.18::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6.19 for RHEL 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6.19::el9\"],\"versions\":[{\"version\":\"0:0.0.4-1.el9sat\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Streams for Apache Kafka 3.2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github\",\"cpes\":[\"cpe:/a:redhat:amq_streams:3.2::el9\"],\"versions\":[{\"version\":\"danielqsj-kafka_exporter\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cert Manager support for Red Hat OpenShift release 1.19\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cert-manager/jetstack-cert-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:cert_manager:1.19::el9\"],\"versions\":[{\"version\":\"1786613805\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Cluster Observability Operator 1.5.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"cluster-observability-operator/perses-rhel9\",\"cpes\":[\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"],\"versions\":[{\"version\":\"1787593946\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Compliance Operator 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"],\"versions\":[{\"version\":\"1786380082\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"external secrets operator for Red Hat OpenShift 1.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"external-secrets-operator/external-secrets-rhel9\",\"cpes\":[\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"],\"versions\":[{\"version\":\"1786614676\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786549223\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787201612\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1786764622\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.10::el9\"],\"versions\":[{\"version\":\"1787176886\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911941\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911952\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911945\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786912006\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911973\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786911984\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1786907276\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787238383\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239116\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.11::el9\"],\"versions\":[{\"version\":\"1787239595\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786577950\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786750700\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786983362\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.17::el9\"],\"versions\":[{\"version\":\"1786664288\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259112\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787264185\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787259740\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.6::el9\"],\"versions\":[{\"version\":\"1787260821\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/backplane-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784737366\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/hypershift-addon-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784738758\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/kube-rbac-proxy-mce-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1784677239\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/addon-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259015\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259059\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259011\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259016\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterlifecycle-state-metrics-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787258993\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/managedcluster-import-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259044\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/multicloud-manager-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259047\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/placement-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-operator-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259126\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/registration-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.8\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/work-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.8::el9\"],\"versions\":[{\"version\":\"1787259113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/clusterclaims-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787195995\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-curator-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787201646\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/cluster-image-set-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1786764601\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"multicluster engine for Kubernetes 2.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-engine/provider-credential-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine:2.9::el9\"],\"versions\":[{\"version\":\"1787176716\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.4.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"],\"versions\":[{\"version\":\"1784061472\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.6.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"],\"versions\":[{\"version\":\"1784152046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.7.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"],\"versions\":[{\"version\":\"1784768332\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"1785775948\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Global Hub 1.8.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"multicluster-globalhub/multicluster-globalhub-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"],\"versions\":[{\"version\":\"1785763319\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift API for Data Protection 1.5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"oadp/oadp-velero-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"],\"versions\":[{\"version\":\"1788860461\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel8\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784727697\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services 1.6.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"source-to-image/source-to-image-rhel9\",\"cpes\":[\"cpe:/a:redhat:source_to_image:1.6::el8\"],\"versions\":[{\"version\":\"1784728036\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260689\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787262214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787260663\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.11::el9\"],\"versions\":[{\"version\":\"1787263584\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/kube-rbac-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784677172\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multiclusterhub-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784638644\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-observability-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1784590741\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259106\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259284\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787259310\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.13::el9\"],\"versions\":[{\"version\":\"1787263693\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787183407\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1786976940\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787172840\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.14::el9\"],\"versions\":[{\"version\":\"1787170830\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547792\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786547807\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.15::el9\"],\"versions\":[{\"version\":\"1786549537\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787252179\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242135\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242105\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.16::el9\"],\"versions\":[{\"version\":\"1787242321\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicloud-integrations-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787243221\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-application-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242131\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-channel-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242099\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/multicluster-operators-subscription-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1787242108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhacm2/subctl-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2.17::el9\"],\"versions\":[{\"version\":\"1788105072\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2.7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"ansible-automation-platform-27/receptor-rhel9\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"],\"versions\":[{\"version\":\"1783917963\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Developer Hub 1.9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhdh/rhdh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:rhdh:1.9::el9\"],\"versions\":[{\"version\":\"1782767215\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-25-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.25.11-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Hardened Images\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang1-26-main\",\"cpes\":[\"cpe:/a:redhat:hummingbird:1\"],\"versions\":[{\"version\":\"1.26.4-2.hum1\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"],\"versions\":[{\"version\":\"1786483782\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI 2.25\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhoai/odh-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai:2.25::el9\"],\"versions\":[{\"version\":\"1784004914\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.7.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.7::el9\"],\"versions\":[{\"version\":\"1783057868\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1784121108\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Builds 1.8.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-builds/openshift-builds-waiters-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_builds:1.8::el9\"],\"versions\":[{\"version\":\"1783612119\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.17\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.17::el9\"],\"versions\":[{\"version\":\"1787554347\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.18\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.18::el9\"],\"versions\":[{\"version\":\"1786754425\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4.21\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift4/ose-ansible-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4.21::el9\"],\"versions\":[{\"version\":\"1786526139\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-collector-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704636\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3.10.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"rhosdt/opentelemetry-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"],\"versions\":[{\"version\":\"1785704547\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885742\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784885559\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784908682\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.0::el9\"],\"versions\":[{\"version\":\"1784917979\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885281\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784885133\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784953556\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.1::el9\"],\"versions\":[{\"version\":\"1784918113\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921753\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784921772\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784953743\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.2::el9\"],\"versions\":[{\"version\":\"1784918117\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885810\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784885681\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1784908639\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.3::el9\"],\"versions\":[{\"version\":\"1785316150\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-cni-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131046\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-pilot-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131063\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-proxyv2-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785131291\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Service Mesh 3.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"openshift-service-mesh/istio-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3.4::el9\"],\"versions\":[{\"version\":\"1785317214\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Trusted Artifact Signer 1.4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conforma-cli-stack-v1\",\"cpes\":[\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"],\"versions\":[{\"version\":\"4-1.4.2\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"},{\"version\":\"4-1.4.3\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.11\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.11::el9\"],\"versions\":[{\"version\":\"1784296203\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.12\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.12::el9\"],\"versions\":[{\"version\":\"1784247610\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.13\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.13::el9\"],\"versions\":[{\"version\":\"1784296127\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.14\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.14::el9\"],\"versions\":[{\"version\":\"1784296114\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.15\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.15::el9\"],\"versions\":[{\"version\":\"1784296033\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Web Terminal 1.16\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://catalog.redhat.com/software/containers/\",\"packageName\":\"web-terminal/web-terminal-exec-rhel9\",\"cpes\":[\"cpe:/a:redhat:webterminal:1.16::el9\"],\"versions\":[{\"version\":\"1786654871\",\"lessThan\":\"*\",\"versionType\":\"rpm\",\"status\":\"unaffected\"}]},{\"vendor\":\"Red Hat\",\"product\":\"Assisted Installer for Red Hat OpenShift Container Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhai/assisted-installer-rhel9\",\"cpes\":[\"cpe:/a:redhat:assisted_installer:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"build-of-trustee/trustee-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Confidential Compute Attestation\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-sandboxed-containers/osc-monitor-rhel9\",\"cpes\":[\"cpe:/a:redhat:confidential_compute_attestation:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Cryostat 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cryostat/cryostat-storage-rhel9\",\"cpes\":[\"cpe:/a:redhat:cryostat:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Custom Metric Autoscaler operator for Red Hat Openshift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Deployment Validation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"dvo/deployment-validation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:deployment_validator_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"ExternalDNS Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"edo/external-dns-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:ext_dns_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Fence Agents Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/fence-agents-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_far:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"File Integrity Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-compliance-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:openshift_file_integrity_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Gatekeeper 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gatekeeper/gatekeeper-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:gatekeeper:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logging Subsystem for Red Hat OpenShift\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-logging/eventrouter-rhel9\",\"cpes\":[\"cpe:/a:redhat:logging:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/lvms-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel8\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Logical Volume Manager Storage\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"lvms4/topolvm-rhel9\",\"cpes\":[\"cpe:/a:redhat:lvms:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Machine Deletion Remediation Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/machine-deletion-remediation-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_mdr:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Applications 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"mta/mta-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:migration_toolkit_applications:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Migration Toolkit for Containers\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhmtc/openshift-migration-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:rhmt:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"mirror registry for Red Hat OpenShift 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift/mirror-registry-rhel8\",\"cpes\":[\"cpe:/a:redhat:mirror_registry:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multiarch Tuning Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multiarch-tuning/multiarch-tuning-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:multiarch_tuning_operator\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/assisted-service-9-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/discovery-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/hive-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Multicluster Engine for Kubernetes\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"multicluster-engine/maestro-rhel9\",\"cpes\":[\"cpe:/a:redhat:multicluster_engine\"]},{\"vendor\":\"Red Hat\",\"product\":\"Network Observability Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"network-observability/network-observability-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:network_observ_optr:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Node HealthCheck Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"workload-availability/node-healthcheck-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:workload_availability_nhc:0\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Developer Tools and Services\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"helm\",\"cpes\":[\"cpe:/a:redhat:ocp_tools\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Lightspeed\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-lightspeed/lightspeed-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_lightspeed\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines-client\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Pipelines\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-pipelines/pipelines-scheduler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_pipelines:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kn-workflow-plugin\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/kn-plugin-event-sender-rhel9\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-1/logic-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Serverless\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-serverless-clients\",\"cpes\":[\"cpe:/a:redhat:serverless:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel8\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:service_mesh:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"OpenShift Service Mesh 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-service-mesh/kiali-rhel9\",\"cpes\":[\"cpe:/a:redhat:service_mesh:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Power monitoring for Red Hat OpenShift\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-power-monitoring/kepler-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_power_monitoring\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel7-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat 3scale API Management Platform 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"3scale-amp2/3scale-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:red_hat_3scale_amp:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-governance-policy-framework-addon-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/acm-volsync-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/config-policy-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/governance-policy-propagator-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/klusterlet-addon-controller-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Management for Kubernetes 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhacm2/thanos-rhel9\",\"cpes\":[\"cpe:/a:redhat:acm:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel8\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Advanced Cluster Security 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"advanced-cluster-security/rhacs-main-rhel9\",\"cpes\":[\"cpe:/a:redhat:advanced_cluster_security:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ansible-automation-platform/platform-operator-bundle\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl30\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"automation-gateway-proxy-openssl32\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.11-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-galaxy-ng\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3.12-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python3x-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ansible Automation Platform 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"python-grpcio\",\"cpes\":[\"cpe:/a:redhat:ansible_automation_platform:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 5\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel8\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:5\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/snmp-notifier-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/grafana-rhel9\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Ceph Storage 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhceph/alloy-rhel10\",\"cpes\":[\"cpe:/a:redhat:ceph_storage:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/authorino-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Connectivity Link 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhcl-1/coredns-rhel9\",\"cpes\":[\"cpe:/a:redhat:connectivity_link:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"flightctl\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Edge Manager 1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhem/flightctl-ui-rhel9\",\"cpes\":[\"cpe:/a:redhat:edge_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"delve\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel10-eus/rhel-10.0-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 10\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:10\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 7\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhc-worker-script\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:7\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/skopeo\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-tools:rhel8/toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 8\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:8\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"buildah\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"butane\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"git-lfs\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"grafana-pcp\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"gvisor-tap-vsock\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"osbuild-composer\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9/bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhel9-eus/rhel-9.6-bootc-image-builder\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"toolbox\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"trustee-guest-components\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux 9\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"weldr-client\",\"cpes\":[\"cpe:/o:redhat:enterprise_linux:9\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Enterprise Linux AI (RHEL AI) 3\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang\",\"cpes\":[\"cpe:/a:redhat:enterprise_linux_ai:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/odh-rhel8-operator\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift AI (RHOAI)\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoai/rhai-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_ai\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Cluster Manager CLI\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ocm-cli-clients/ocm-cli-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"conmon-rs\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"containernetworking-plugins\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-o\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"cri-tools\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-prometheus-promu\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ignition\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kata-containers\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"microshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/frr-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-ansible-operator\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-cli\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4/ose-hypershift-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-clients\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-kuryr\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-aws-ecr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-azure-acr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-crio-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"ose-gcp-gcr-image-credential-provider\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"podman\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"runc\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Container Platform 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skopeo\",\"cpes\":[\"cpe:/a:redhat:openshift:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Openshift Data Foundation 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"odf4/cephcsi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_data_foundation:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Spaces\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devspaces/udi-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_devspaces:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Dev Workspaces Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"devworkspace/devworkspace-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:devworkspace\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift distributed tracing 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosdt/tempo-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_distributed_tracing:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift for Windows Containers\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift4-wincw/windows-machine-config-rhel9-operator\",\"cpes\":[\"cpe:/a:redhat:windows_machine_config\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift GitOps\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"openshift-gitops-1/dex-rhel9\",\"cpes\":[\"cpe:/a:redhat:openshift_gitops:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift on AWS\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rosa\",\"cpes\":[\"cpe:/a:redhat:openshift_service_on_aws:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"container-native-virtualization/kubevirt-redfish-rhel9\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"kubevirt\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenShift Virtualization 4\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rh-osbs/openshift-golang-builder\",\"cpes\":[\"cpe:/a:redhat:container_native_virtualization:4\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 16.2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:16.2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"collectd-libpod-stats\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"etcd\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-infrawatch-apputils\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 17.1\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhosp-rhel9/osp-director-agent\",\"cpes\":[\"cpe:/a:redhat:openstack:17.1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-openstack-k8s-operators-os-diff\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat OpenStack Platform 18.0\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"rhoso-operators/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:openstack:18.0\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel8\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Quay 3\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"quay/quay-rhel9\",\"cpes\":[\"cpe:/a:redhat:quay:3\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite:el8/yggdrasil-worker-forwarder\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Satellite 6\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"satellite/iop-vmaas-rhel9\",\"cpes\":[\"cpe:/a:redhat:satellite:6\"]},{\"vendor\":\"Red Hat\",\"product\":\"Red Hat Service Interconnect 2\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"skupper-cli\",\"cpes\":[\"cpe:/a:redhat:service_interconnect:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Security Profiles Operator\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"compliance/openshift-selinuxd-rhel8\",\"cpes\":[\"cpe:/a:redhat:openshift_security_profiles_operator:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Service Telemetry Framework 1.5\",\"defaultStatus\":\"unaffected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"stf/sg-core-rhel9\",\"cpes\":[\"cpe:/a:redhat:stf:1.5\"]},{\"vendor\":\"Red Hat\",\"product\":\"streams for Apache Kafka 2\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"golang-github-danielqsj-kafka_exporter\",\"cpes\":[\"cpe:/a:redhat:amq_streams:2\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"]},{\"vendor\":\"Red Hat\",\"product\":\"Zero Trust Workload Identity Manager - Tech Preview\",\"defaultStatus\":\"affected\",\"collectionURL\":\"https://access.redhat.com/downloads/content/package-browser/\",\"packageName\":\"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\",\"cpes\":[\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"]}]}],\"metrics\":{\"cvssMetricV31\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\",\"baseScore\":6.5,\"baseSeverity\":\"MEDIUM\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"HIGH\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"LOW\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":2.2,\"impactScore\":4.2},{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"cvssData\":{\"version\":\"3.1\",\"vectorString\":\"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\",\"baseScore\":7.5,\"baseSeverity\":\"HIGH\",\"attackVector\":\"NETWORK\",\"attackComplexity\":\"LOW\",\"privilegesRequired\":\"NONE\",\"userInteraction\":\"NONE\",\"scope\":\"UNCHANGED\",\"confidentialityImpact\":\"NONE\",\"integrityImpact\":\"NONE\",\"availabilityImpact\":\"HIGH\"},\"exploitabilityScore\":3.9,\"impactScore\":3.6}],\"ssvcV203\":[{\"source\":\"134c704f-9b21-4f2e-91b3-4a467353bcc0\",\"ssvcData\":{\"timestamp\":\"2026-06-04T12:34:03.859208Z\",\"id\":\"CVE-2026-27145\",\"options\":[{\"exploitation\":\"none\"},{\"automatable\":\"no\"},{\"technicalImpact\":\"partial\"}],\"role\":\"CISA Coordinator\",\"version\":\"2.0.3\"}}]},\"weaknesses\":[{\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\",\"type\":\"Secondary\",\"description\":[{\"lang\":\"en\",\"value\":\"CWE-606\"}]}],\"references\":[{\"url\":\"https://go.dev/cl/783621\",\"source\":\"security@golang.org\"},{\"url\":\"https://go.dev/issue/79694\",\"source\":\"security@golang.org\"},{\"url\":\"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\",\"source\":\"security@golang.org\"},{\"url\":\"https://pkg.go.dev/vuln/GO-2026-5037\",\"source\":\"security@golang.org\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23262\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:23264\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29980\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:29981\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:33574\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34357\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:34359\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:35832\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36317\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36648\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:36797\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:38995\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39005\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39573\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:39879\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41030\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41036\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:41930\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42043\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42047\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42049\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42050\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42051\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42079\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42080\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42082\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42142\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42150\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42151\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42240\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42644\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:42946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:44622\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46394\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:46395\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47149\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47735\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:47737\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49702\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49703\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49705\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49712\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49729\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49744\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49765\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:49770\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50205\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:50319\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51057\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:51187\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:52946\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53374\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53412\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53413\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53415\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53416\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:53530\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54168\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54401\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54427\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54432\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54435\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54441\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54500\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54525\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54531\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54603\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:54757\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:55899\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57194\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57482\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57488\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:57649\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59556\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59557\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59558\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59559\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59579\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:59593\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60025\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60315\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60354\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60386\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60387\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60388\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60390\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:60391\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61253\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:61314\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:63016\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/errata/RHSA-2026:66022\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://access.redhat.com/security/cve/CVE-2026-27145\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"},{\"url\":\"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\",\"source\":\"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\"}]}}",
"redhat_vex": {
"aggregate_severity": "Important",
"current_release_date": "2026-09-10T19:48:55+00:00",
"cve": "CVE-2026-27145",
"id": "CVE-2026-27145",
"initial_release_date": "2026-06-02T22:01:36.954000+00:00",
"product_status:fixed": "977",
"product_status:known_affected": "68",
"product_status:known_not_affected": "4510",
"source": "Red Hat CSAF VEX",
"status": "final",
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json",
"version": "3"
},
"vulnrichment": {
"containers": "{\"adp\": [{\"title\": \"crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries\", \"metrics\": [{\"other\": {\"type\": \"Red Hat severity rating\", \"content\": {\"value\": \"Important\", \"namespace\": \"https://access.redhat.com/security/updates/classification/\"}}}, {\"format\": \"CVSS\", \"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 7.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"HIGH\", \"vectorString\": \"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\", \"integrityImpact\": \"NONE\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"LOW\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}], \"affected\": [{\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el8ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.5 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.7-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.6 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el10ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.6.6-1.el9ap\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"receptor\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.9.27-7.el10_2.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github-openprinting-ipp-usb\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.8-6.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.9.2-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.10-1.el10_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.0-4.el10_2.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-client\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.0.1-2.el10_2.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-fdo-server\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.4.7-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.3.2-5.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux_eus:10.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10.0 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.3-6.el10_0\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc-worker-playbook\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:rhel_els:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7 Extended Lifecycle Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.4.0-8.el7_9\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"host-metering\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"8100020260710105056.a3795dee\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"go-toolset:rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.5-9.el8_10\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.4-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"2:1.22.2-7.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"skopeo\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-8.el9_8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.2-1.el9_2.4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_e4s:9.4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.4 Update Services for SAP Solutions\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.4-9.el9_4\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:1.26.5-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.152.1-1.el9_6\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"opentelemetry-collector\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhel_eus:9.6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9.6 Extended Update Support\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1:0.2.7-1.el9_6.5\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.23.0-5.rhaos4.18.el8\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"butane\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.2.1-1.1.el8ost\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"collectd-sensubility\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el8sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.16 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.17 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.18 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6.19 for RHEL 9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"0:0.0.4-1.el9sat\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Streams for Apache Kafka 3.2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"danielqsj-kafka_exporter\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang-github\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cert_manager:1.19::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cert Manager support for Red Hat OpenShift release 1.19\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786613805\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cert-manager/jetstack-cert-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cluster_observability_operator:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Cluster Observability Operator 1.5.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787593946\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"cluster-observability-operator/perses-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_compliance_operator:1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Compliance Operator 1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786380082\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:external_secrets_operator:1.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"external secrets operator for Red Hat OpenShift 1.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786614676\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"external-secrets-operator/external-secrets-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549223\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201612\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764622\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176886\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911941\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911952\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911945\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786912006\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911973\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786911984\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786907276\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787238383\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239116\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787239595\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786577950\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786750700\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786983362\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786664288\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259112\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787264185\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259740\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.6\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260821\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784737366\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/backplane-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784738758\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/hypershift-addon-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677239\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/kube-rbac-proxy-mce-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259015\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/addon-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259059\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259011\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259016\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787258993\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterlifecycle-state-metrics-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259044\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/managedcluster-import-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259047\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/multicloud-manager-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/placement-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259126\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-operator-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/registration-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.8\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/work-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787195995\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/clusterclaims-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787201646\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-curator-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786764601\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/cluster-image-set-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine:2.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"multicluster engine for Kubernetes 2.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787176716\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-engine/provider-credential-controller-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.4.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784061472\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.6::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.6.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784152046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.7.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784768332\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"1785775948\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_globalhub:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Global Hub 1.8.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785763319\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"multicluster-globalhub/multicluster-globalhub-agent-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_api_data_protection:1.5::el9\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift API for Data Protection 1.5\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1788860461\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"oadp/oadp-velero-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784727697\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel8\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:source_to_image:1.6::el8\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services 1.6.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784728036\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"source-to-image/source-to-image-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260689\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787262214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787260663\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263584\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784677172\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/kube-rbac-proxy-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784638644\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multiclusterhub-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784590741\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-observability-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259106\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259284\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787259310\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787263693\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787183407\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786976940\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787172840\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787170830\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547792\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786547807\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786549537\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787252179\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242135\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242105\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242321\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787243221\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicloud-integrations-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242131\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-application-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242099\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-channel-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787242108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/multicluster-operators-subscription-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1788105072\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhacm2/subctl-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2.7\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783917963\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"ansible-automation-platform-27/receptor-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:rhdh:1.9::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Developer Hub 1.9\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1782767215\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhdh/rhdh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.25.11-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-25-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:hummingbird:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Hardened Images\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1.26.4-2.hum1\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"golang1-26-main\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:lightspeed_for_runtimes:1.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786483782\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rh-lightspeed-runtimes/runtimes-inventory-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai:2.25::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI 2.25\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784004914\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhoai/odh-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.7::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.7.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783057868\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784121108\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_builds:1.8::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Builds 1.8.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1783612119\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-builds/openshift-builds-waiters-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.17::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.17\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1787554347\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.18::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.18\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786754425\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4.21::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4.21\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786526139\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift4/ose-ansible-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704636\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-collector-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3.10::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3.10.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785704547\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"rhosdt/opentelemetry-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885742\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885559\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908682\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.0::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.0\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784917979\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885281\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885133\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953556\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.1::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.1\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918113\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921753\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784921772\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784953743\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.2::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.2\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784918117\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885810\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784885681\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784908639\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.3::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.3\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785316150\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131046\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-cni-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131063\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-pilot-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785131291\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-proxyv2-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Service Mesh 3.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1785317214\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"openshift-service-mesh/istio-rhel9-operator\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:trusted_artifact_signer:1.4::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Trusted Artifact Signer 1.4\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"4-1.4.2\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}, {\"status\": \"unaffected\", \"version\": \"4-1.4.3\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"conforma-cli-stack-v1\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.11::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.11\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296203\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.12::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.12\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784247610\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.13::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.13\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296127\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.14::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.14\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296114\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.15::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.15\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1784296033\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:webterminal:1.16::el9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Web Terminal 1.16\", \"versions\": [{\"status\": \"unaffected\", \"version\": \"1786654871\", \"lessThan\": \"*\", \"versionType\": \"rpm\"}], \"packageName\": \"web-terminal/web-terminal-exec-rhel9\", \"collectionURL\": \"https://catalog.redhat.com/software/containers/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:assisted_installer:2\"], \"vendor\": \"Red Hat\", \"product\": \"Assisted Installer for Red Hat OpenShift Container Platform 2\", \"packageName\": \"rhai/assisted-installer-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"build-of-trustee/trustee-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:confidential_compute_attestation:1\"], \"vendor\": \"Red Hat\", \"product\": \"Confidential Compute Attestation\", \"packageName\": \"openshift-sandboxed-containers/osc-monitor-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:cryostat:4\"], \"vendor\": \"Red Hat\", \"product\": \"Cryostat 4\", \"packageName\": \"cryostat/cryostat-storage-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_custom_metrics_autoscaler:2\"], \"vendor\": \"Red Hat\", \"product\": \"Custom Metric Autoscaler operator for Red Hat Openshift\", \"packageName\": \"custom-metrics-autoscaler/custom-metrics-autoscaler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:deployment_validator_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Deployment Validation Operator\", \"packageName\": \"dvo/deployment-validation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ext_dns_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"ExternalDNS Operator\", \"packageName\": \"edo/external-dns-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_far:0\"], \"vendor\": \"Red Hat\", \"product\": \"Fence Agents Remediation Operator\", \"packageName\": \"workload-availability/fence-agents-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_file_integrity_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"File Integrity Operator\", \"packageName\": \"compliance/openshift-compliance-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:gatekeeper:3\"], \"vendor\": \"Red Hat\", \"product\": \"Gatekeeper 3\", \"packageName\": \"gatekeeper/gatekeeper-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:logging:6\"], \"vendor\": \"Red Hat\", \"product\": \"Logging Subsystem for Red Hat OpenShift\", \"packageName\": \"openshift-logging/eventrouter-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/lvms-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:lvms:4\"], \"vendor\": \"Red Hat\", \"product\": \"Logical Volume Manager Storage\", \"packageName\": \"lvms4/topolvm-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_mdr:0\"], \"vendor\": \"Red Hat\", \"product\": \"Machine Deletion Remediation Operator\", \"packageName\": \"workload-availability/machine-deletion-remediation-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:migration_toolkit_applications:8\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Applications 8\", \"packageName\": \"mta/mta-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:rhmt:1\"], \"vendor\": \"Red Hat\", \"product\": \"Migration Toolkit for Containers\", \"packageName\": \"rhmtc/openshift-migration-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:mirror_registry:2\"], \"vendor\": \"Red Hat\", \"product\": \"mirror registry for Red Hat OpenShift 2\", \"packageName\": \"openshift/mirror-registry-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multiarch_tuning_operator\"], \"vendor\": \"Red Hat\", \"product\": \"Multiarch Tuning Operator\", \"packageName\": \"multiarch-tuning/multiarch-tuning-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/assisted-service-9-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/discovery-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/hive-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:multicluster_engine\"], \"vendor\": \"Red Hat\", \"product\": \"Multicluster Engine for Kubernetes\", \"packageName\": \"multicluster-engine/maestro-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:network_observ_optr:1\"], \"vendor\": \"Red Hat\", \"product\": \"Network Observability Operator\", \"packageName\": \"network-observability/network-observability-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-operator-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"node-healthcheck-operator-tech-preview/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:workload_availability_nhc:0\"], \"vendor\": \"Red Hat\", \"product\": \"Node HealthCheck Operator\", \"packageName\": \"workload-availability/node-healthcheck-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ocp_tools\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Developer Tools and Services\", \"packageName\": \"helm\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_lightspeed\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Lightspeed\", \"packageName\": \"openshift-lightspeed/lightspeed-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_pipelines:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Pipelines\", \"packageName\": \"openshift-pipelines/pipelines-scheduler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"kn-workflow-plugin\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/kn-plugin-event-sender-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-1/logic-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:serverless:1\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Serverless\", \"packageName\": \"openshift-serverless-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"openshift-service-mesh/kiali-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:2\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 2\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_mesh:3\"], \"vendor\": \"Red Hat\", \"product\": \"OpenShift Service Mesh 3\", \"packageName\": \"openshift-service-mesh/kiali-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_power_monitoring\"], \"vendor\": \"Red Hat\", \"product\": \"Power monitoring for Red Hat OpenShift\", \"packageName\": \"openshift-power-monitoring/kepler-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel7-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:red_hat_3scale_amp:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat 3scale API Management Platform 2\", \"packageName\": \"3scale-amp2/3scale-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-governance-policy-framework-addon-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/acm-volsync-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/config-policy-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/governance-policy-propagator-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/klusterlet-addon-controller-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:acm:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Management for Kubernetes 2\", \"packageName\": \"rhacm2/thanos-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:advanced_cluster_security:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Advanced Cluster Security 4\", \"packageName\": \"advanced-cluster-security/rhacs-main-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"ansible-automation-platform/platform-operator-bundle\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl30\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"automation-gateway-proxy-openssl32\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.11-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-galaxy-ng\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3.12-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python3x-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ansible_automation_platform:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ansible Automation Platform 2\", \"packageName\": \"python-grpcio\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:5\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 5\", \"packageName\": \"rhceph/snmp-notifier-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 6\", \"packageName\": \"rhceph/snmp-notifier-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 7\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 8\", \"packageName\": \"rhceph/grafana-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:ceph_storage:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Ceph Storage 9\", \"packageName\": \"rhceph/alloy-rhel10\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/authorino-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:connectivity_link:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Connectivity Link 1\", \"packageName\": \"rhcl-1/coredns-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"flightctl\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:edge_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Edge Manager 1\", \"packageName\": \"rhem/flightctl-ui-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"delve\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"rhel10-eus/rhel-10.0-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:10\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 10\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:7\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 7\", \"packageName\": \"rhc-worker-script\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"container-tools:rhel8/toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:8\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 8\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"buildah\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"butane\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"git-lfs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"grafana-pcp\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"gvisor-tap-vsock\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"osbuild-composer\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9/bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"rhel9-eus/rhel-9.6-bootc-image-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"toolbox\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"trustee-guest-components\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/o:redhat:enterprise_linux:9\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux 9\", \"packageName\": \"weldr-client\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:enterprise_linux_ai:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Enterprise Linux AI (RHEL AI) 3\", \"packageName\": \"golang\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/odh-rhel8-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_ai\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift AI (RHOAI)\", \"packageName\": \"rhoai/rhai-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_cluster_manager_cli:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Cluster Manager CLI\", \"packageName\": \"ocm-cli-clients/ocm-cli-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"conmon-rs\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"containernetworking-plugins\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-o\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"cri-tools\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"golang-github-prometheus-promu\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ignition\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"kata-containers\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"microshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/frr-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-ansible-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift4/ose-hypershift-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-clients\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"openshift-kuryr\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-aws-ecr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-azure-acr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-crio-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"ose-gcp-gcr-image-credential-provider\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"podman\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"runc\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Container Platform 4\", \"packageName\": \"skopeo\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_data_foundation:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Openshift Data Foundation 4\", \"packageName\": \"odf4/cephcsi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_devspaces:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Spaces\", \"packageName\": \"devspaces/udi-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:devworkspace\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Dev Workspaces Operator\", \"packageName\": \"devworkspace/devworkspace-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_distributed_tracing:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift distributed tracing 3\", \"packageName\": \"rhosdt/tempo-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:windows_machine_config\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift for Windows Containers\", \"packageName\": \"openshift4-wincw/windows-machine-config-rhel9-operator\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_gitops:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift GitOps\", \"packageName\": \"openshift-gitops-1/dex-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_service_on_aws:1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift on AWS\", \"packageName\": \"rosa\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-apiserver-proxy-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"container-native-virtualization/kubevirt-redfish-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"kubevirt\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:container_native_virtualization:4\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenShift Virtualization 4\", \"packageName\": \"rh-osbs/openshift-golang-builder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:16.2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 16.2\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"collectd-libpod-stats\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"etcd\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"golang-github-infrawatch-apputils\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:17.1\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 17.1\", \"packageName\": \"rhosp-rhel9/osp-director-agent\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"golang-github-openstack-k8s-operators-os-diff\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:openstack:18.0\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat OpenStack Platform 18.0\", \"packageName\": \"rhoso-operators/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:quay:3\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Quay 3\", \"packageName\": \"quay/quay-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite:el8/yggdrasil-worker-forwarder\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:satellite:6\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Satellite 6\", \"packageName\": \"satellite/iop-vmaas-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:service_interconnect:2\"], \"vendor\": \"Red Hat\", \"product\": \"Red Hat Service Interconnect 2\", \"packageName\": \"skupper-cli\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:openshift_security_profiles_operator:1\"], \"vendor\": \"Red Hat\", \"product\": \"Security Profiles Operator\", \"packageName\": \"compliance/openshift-selinuxd-rhel8\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:stf:1.5\"], \"vendor\": \"Red Hat\", \"product\": \"Service Telemetry Framework 1.5\", \"packageName\": \"stf/sg-core-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"unaffected\"}, {\"cpes\": [\"cpe:/a:redhat:amq_streams:2\"], \"vendor\": \"Red Hat\", \"product\": \"streams for Apache Kafka 2\", \"packageName\": \"golang-github-danielqsj-kafka_exporter\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:1\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-csi-driver-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}, {\"cpes\": [\"cpe:/a:redhat:zero_trust_workload_identity_manager:0\"], \"vendor\": \"Red Hat\", \"product\": \"Zero Trust Workload Identity Manager - Tech Preview\", \"packageName\": \"zero-trust-workload-identity-manager/spiffe-spire-agent-rhel9\", \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\", \"defaultStatus\": \"affected\"}], \"timeline\": [{\"lang\": \"en\", \"time\": \"2026-06-02T23:01:08.992Z\", \"value\": \"Reported to Red Hat.\"}, {\"lang\": \"en\", \"time\": \"2026-06-02T22:01:36.954Z\", \"value\": \"Made public.\"}], \"solutions\": [{\"lang\": \"en\", \"value\": \"RHSA-2026:42079: Red Hat Ansible Automation Platform 2.6 for RHEL 10, Red Hat Ansible Automation Platform 2.6 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42080: Red Hat Ansible Automation Platform 2.7 for RHEL 10, Red Hat Ansible Automation Platform 2.7 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53416: Red Hat Enterprise Linux Server (v. 7 ELS)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50319: Red Hat Ansible Automation Platform 2.5 for RHEL 8, Red Hat Ansible Automation Platform 2.5 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54757: Red Hat OpenStack Platform 16.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57482: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42082: Red Hat Satellite 6.16 for RHEL 8, Red Hat Satellite 6.16 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42150: Red Hat Satellite 6.17 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42151: Red Hat Satellite 6.18 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42240: Red Hat Satellite 6.19 for RHEL 9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49703: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49702: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53413: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53374: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54168: Red Hat Enterprise Linux AppStream EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51187: Red Hat Enterprise Linux AppStream EUS (v. 10.0), Red Hat Enterprise Linux CodeReady Linux Builder EUS (v. 10.0)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46394: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:46395: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29980: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:35832: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34357: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39005: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42946: Red Hat Enterprise Linux AppStream (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39573: Red Hat Enterprise Linux AppStream (v. 10), Red Hat Enterprise Linux CodeReady Linux Builder (v. 10)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:38995: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41930: Red Hat Enterprise Linux AppStream (v. 8)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61253: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60354: Red Hat Enterprise Linux AppStream E4S (v.9.2)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57649: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53412: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60315: Red Hat Enterprise Linux AppStream E4S (v.9.4)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49712: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53415: Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54401: Red Hat CodeReady Linux Builder EUS (v.9.6), Red Hat Enterprise Linux AppStream EUS (v.9.6)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:29981: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:34359: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:39879: Red Hat Enterprise Linux AppStream (v. 9), Red Hat Enterprise Linux CodeReady Linux Builder (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36317: Red Hat Enterprise Linux AppStream (v. 9)\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54531: Cert Manager support for Red Hat OpenShift release 1.19\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:61314: Cluster Observability Operator 1.5.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54500: Compliance Operator 1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41030: Multicluster Global Hub 1.4.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:44622: Multicluster Global Hub 1.6.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47149: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:53530: Multicluster Global Hub 1.7.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:52946: Multicluster Global Hub 1.8.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:66022: OpenShift API for Data Protection 1.5\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:51057: OpenShift Developer Tools and Services 1.6.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60387: Red Hat Advanced Cluster Management for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47737: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60390: Red Hat Advanced Cluster Management for Kubernetes 2.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60388: Red Hat Advanced Cluster Management for Kubernetes 2.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54427: Red Hat Advanced Cluster Management for Kubernetes 2.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60391: Red Hat Advanced Cluster Management for Kubernetes 2.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60386: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:63016: Red Hat Advanced Cluster Management for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42142: Red Hat Ansible Automation Platform 2.7\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:33574: Red Hat Developer Hub 1.9\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23262: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:23264: Red Hat Hardened Images\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54441: Red Hat Lightspeed (formerly Insights) for Runtimes 1.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42644: Red Hat OpenShift AI 2.25\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36648: Red Hat OpenShift Builds 1.7.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:41036: Red Hat OpenShift Builds 1.8.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:60025: Red Hat OpenShift Container Platform 4.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57488: Red Hat OpenShift Container Platform 4.18\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54603: Red Hat OpenShift Container Platform 4.21\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49705: Red Hat OpenShift Service Mesh 3.0\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49729: Red Hat OpenShift Service Mesh 3.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49744: Red Hat OpenShift Service Mesh 3.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49765: Red Hat OpenShift Service Mesh 3.3\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:49770: Red Hat OpenShift Service Mesh 3.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:50205: Red Hat OpenShift distributed tracing 3.10.2\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:36797: Red Hat Trusted Artifact Signer 1.4\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42043: Red Hat Web Terminal 1.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42047: Red Hat Web Terminal 1.12\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42050: Red Hat Web Terminal 1.13\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42051: Red Hat Web Terminal 1.14\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:42049: Red Hat Web Terminal 1.15\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:55899: Red Hat Web Terminal 1.16\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54435: Streams for Apache Kafka 3.2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54525: external secrets operator for Red Hat OpenShift 1.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:57194: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59556: multicluster engine for Kubernetes 2.11\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59593: multicluster engine for Kubernetes 2.17\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59557: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:54432: multicluster engine for Kubernetes 2.1\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59579: multicluster engine for Kubernetes 2.6\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59558: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:47735: multicluster engine for Kubernetes 2.8\"}, {\"lang\": \"en\", \"value\": \"RHSA-2026:59559: multicluster engine for Kubernetes 2.9\"}], \"x_adpType\": \"supplier\", \"datePublic\": \"2026-06-02T22:01:36.954Z\", \"references\": [{\"url\": \"https://access.redhat.com/security/cve/CVE-2026-27145\", \"tags\": [\"vdb-entry\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://bugzilla.redhat.com/show_bug.cgi?id=2484207\", \"name\": \"RHBZ#2484207\", \"tags\": [\"issue-tracking\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-27145.json\", \"tags\": [\"x_sadp-csaf-vex\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42079\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42080\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53416\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50319\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54757\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57482\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42082\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42150\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42151\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42240\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49703\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49702\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53413\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53374\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54168\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51187\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46394\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:46395\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29980\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:35832\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34357\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39005\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39573\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:38995\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41930\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61253\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60354\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57649\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53412\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60315\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49712\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53415\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54401\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:29981\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:34359\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:39879\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36317\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54531\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:61314\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54500\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41030\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:44622\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47149\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:53530\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:52946\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:66022\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:51057\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60387\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47737\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60390\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60388\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54427\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60391\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60386\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:63016\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42142\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:33574\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23262\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:23264\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54441\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42644\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36648\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:41036\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:60025\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57488\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54603\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49705\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49729\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49744\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49765\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:49770\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:50205\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:36797\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42043\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42047\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42050\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42051\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:42049\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:55899\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54435\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54525\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:57194\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59556\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59593\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59557\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:54432\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59579\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59558\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:47735\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}, {\"url\": \"https://access.redhat.com/errata/RHSA-2026:59559\", \"tags\": [\"vendor-advisory\", \"x_refsource_REDHAT\"]}], \"workarounds\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \\\".\\\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\\n\\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\\n\\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).\"}], \"x_generator\": {\"engine\": \"sadp-cli 1.0.0\"}, \"descriptions\": [{\"lang\": \"en\", \"value\": \"A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"type\": \"CWE\", \"cweId\": \"CWE-606\", \"description\": \"Unchecked Input for Loop Condition\"}]}], \"providerMetadata\": {\"orgId\": \"0b0ca135-0b70-47e7-9f44-1890c2a1c46c\", \"shortName\": \"redhat-SADP\", \"dateUpdated\": \"2026-09-11T12:09:12.800Z\"}}, {\"title\": \"CISA ADP Vulnrichment\", \"metrics\": [{\"cvssV3_1\": {\"scope\": \"UNCHANGED\", \"version\": \"3.1\", \"baseScore\": 6.5, \"attackVector\": \"NETWORK\", \"baseSeverity\": \"MEDIUM\", \"vectorString\": \"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H\", \"integrityImpact\": \"LOW\", \"userInteraction\": \"NONE\", \"attackComplexity\": \"HIGH\", \"availabilityImpact\": \"HIGH\", \"privilegesRequired\": \"NONE\", \"confidentialityImpact\": \"NONE\"}}, {\"other\": {\"type\": \"ssvc\", \"content\": {\"id\": \"CVE-2026-27145\", \"role\": \"CISA Coordinator\", \"options\": [{\"Exploitation\": \"none\"}, {\"Automatable\": \"no\"}, {\"Technical Impact\": \"partial\"}], \"version\": \"2.0.3\", \"timestamp\": \"2026-06-04T12:34:03.859208Z\"}}}], \"providerMetadata\": {\"orgId\": \"134c704f-9b21-4f2e-91b3-4a467353bcc0\", \"shortName\": \"CISA-ADP\", \"dateUpdated\": \"2026-06-04T12:34:49.559Z\"}}], \"cna\": {\"title\": \"Inefficient candidate hostname parsing in crypto/x509\", \"credits\": [{\"lang\": \"en\", \"value\": \"Jakub Ciolek - https://ciolek.dev/\"}], \"affected\": [{\"vendor\": \"Go standard library\", \"product\": \"crypto/x509\", \"versions\": [{\"status\": \"affected\", \"version\": \"0\", \"lessThan\": \"1.25.11\", \"versionType\": \"semver\"}, {\"status\": \"affected\", \"version\": \"1.26.0-0\", \"lessThan\": \"1.26.4\", \"versionType\": \"semver\"}], \"packageName\": \"crypto/x509\", \"collectionURL\": \"https://pkg.go.dev\", \"defaultStatus\": \"unaffected\", \"programRoutines\": [{\"name\": \"HostnameError.Error\"}, {\"name\": \"matchHostnames\"}, {\"name\": \"Certificate.Verify\"}, {\"name\": \"Certificate.VerifyHostname\"}]}], \"references\": [{\"url\": \"https://go.dev/cl/783621\"}, {\"url\": \"https://go.dev/issue/79694\"}, {\"url\": \"https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw\"}, {\"url\": \"https://pkg.go.dev/vuln/GO-2026-5037\"}], \"descriptions\": [{\"lang\": \"en\", \"value\": \"(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \\\".\\\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.\"}], \"problemTypes\": [{\"descriptions\": [{\"lang\": \"en\", \"description\": \"CWE-407: Inefficient Algorithmic Complexity\"}]}], \"providerMetadata\": {\"orgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"shortName\": \"Go\", \"dateUpdated\": \"2026-06-02T22:01:36.954Z\"}}}",
"cveMetadata": "{\"cveId\": \"CVE-2026-27145\", \"state\": \"PUBLISHED\", \"dateUpdated\": \"2026-09-11T12:09:12.800Z\", \"dateReserved\": \"2026-02-17T19:57:28.435Z\", \"assignerOrgId\": \"1bb62c36-49e3-4200-9d77-64a1400537cc\", \"datePublished\": \"2026-06-02T22:01:36.954Z\", \"assignerShortName\": \"Go\"}",
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
}
}
RHSA-2026:61253
Vulnerability from csaf_redhat - Published: 2026-08-31 04:11 - Updated: 2026-09-14 23:47Summary
Red Hat Security Advisory: golang security update
Severity
Important
Notes
Topic: An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.
Details: The golang packages provide the Go programming language compiler.
Security Fix(es):
* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)
* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)
* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)
* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)
* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)
* cmd/go: golang: Go 'go bug' command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)
* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)
* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)
* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)
* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)
* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)
* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)
* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)
* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)
* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)
* golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)
For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.
8.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the "go tool pack" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the "pack" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.
5.9 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the 'go bug' command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system's temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the 'go bug' command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.
4.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.
7.8 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL's content attribute inside a `<meta>` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.
6.5 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only 'type' attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user's browser.
5.4 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Important
A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.
5.3 (Medium)
Affected products
Fixed
21 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch | — |
Vendor Fix
fix
Workaround
|
Threats
Impact
Moderate
References
145 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "An update for golang is now available for Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.",
"title": "Topic"
},
{
"category": "general",
"text": "The golang packages provide the Go programming language compiler.\n\nSecurity Fix(es):\n\n* crypto/x509: Incorrect enforcement of email constraints in crypto/x509 (CVE-2026-27137)\n\n* crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application (CVE-2026-33810)\n\n* net/mail: golang: net/mail: Denial of Service via pathological email address parsing (CVE-2026-42499)\n\n* cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy (CVE-2026-42501)\n\n* html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content (CVE-2026-39823)\n\n* cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack (CVE-2026-39819)\n\n* net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame (CVE-2026-33814)\n\n* net/mail: golang: Go net/mail: Denial of Service via crafted email inputs (CVE-2026-39820)\n\n* net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME (CVE-2026-33811)\n\n* net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls (CVE-2026-39825)\n\n* cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction (CVE-2026-39817)\n\n* html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping (CVE-2026-39826)\n\n* golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing (CVE-2026-39821)\n\n* net/textproto: golang: Golang net/textproto: Misleading error messages via input injection (CVE-2026-42507)\n\n* crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries (CVE-2026-27145)\n\n* golang: Go os.Root: Symlink following vulnerability allows directory traversal (CVE-2026-39822)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61253",
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/#important",
"url": "https://access.redhat.com/security/updates/classification/#important"
},
{
"category": "external",
"summary": "2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61253.json"
}
],
"title": "Red Hat Security Advisory: golang security update",
"tracking": {
"current_release_date": "2026-09-14T23:47:13+00:00",
"generator": {
"date": "2026-09-14T23:47:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:61253",
"initial_release_date": "2026-08-31T04:11:57+00:00",
"revision_history": [
{
"date": "2026-08-31T04:11:57+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-08-31T04:11:57+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-14T23:47:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product": {
"name": "Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:rhel_e4s:9.2::appstream"
}
}
}
],
"category": "product_family",
"name": "Red Hat Enterprise Linux"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_2.aarch64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_2.aarch64",
"product_id": "go-toolset-0:1.26.5-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_2.aarch64",
"product": {
"name": "golang-0:1.26.5-1.el9_2.aarch64",
"product_id": "golang-0:1.26.5-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_2.aarch64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_2.aarch64",
"product_id": "golang-bin-0:1.26.5-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_2?arch=aarch64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_2.aarch64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_2.aarch64",
"product_id": "golang-race-0:1.26.5-1.el9_2.aarch64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_2?arch=aarch64"
}
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_2.ppc64le",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_2.ppc64le",
"product_id": "go-toolset-0:1.26.5-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_2.ppc64le",
"product": {
"name": "golang-0:1.26.5-1.el9_2.ppc64le",
"product_id": "golang-0:1.26.5-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_2.ppc64le",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_2.ppc64le",
"product_id": "golang-bin-0:1.26.5-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_2?arch=ppc64le"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_2.ppc64le",
"product": {
"name": "golang-race-0:1.26.5-1.el9_2.ppc64le",
"product_id": "golang-race-0:1.26.5-1.el9_2.ppc64le",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_2?arch=ppc64le"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_2.x86_64",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_2.x86_64",
"product_id": "go-toolset-0:1.26.5-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_2.x86_64",
"product": {
"name": "golang-0:1.26.5-1.el9_2.x86_64",
"product_id": "golang-0:1.26.5-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_2.x86_64",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_2.x86_64",
"product_id": "golang-bin-0:1.26.5-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_2?arch=x86_64"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_2.x86_64",
"product": {
"name": "golang-race-0:1.26.5-1.el9_2.x86_64",
"product_id": "golang-race-0:1.26.5-1.el9_2.x86_64",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_2?arch=x86_64"
}
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_version",
"name": "go-toolset-0:1.26.5-1.el9_2.s390x",
"product": {
"name": "go-toolset-0:1.26.5-1.el9_2.s390x",
"product_id": "go-toolset-0:1.26.5-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/go-toolset@1.26.5-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_2.s390x",
"product": {
"name": "golang-0:1.26.5-1.el9_2.s390x",
"product_id": "golang-0:1.26.5-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-bin-0:1.26.5-1.el9_2.s390x",
"product": {
"name": "golang-bin-0:1.26.5-1.el9_2.s390x",
"product_id": "golang-bin-0:1.26.5-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-bin@1.26.5-1.el9_2?arch=s390x"
}
}
},
{
"category": "product_version",
"name": "golang-race-0:1.26.5-1.el9_2.s390x",
"product": {
"name": "golang-race-0:1.26.5-1.el9_2.s390x",
"product_id": "golang-race-0:1.26.5-1.el9_2.s390x",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-race@1.26.5-1.el9_2?arch=s390x"
}
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-0:1.26.5-1.el9_2.src",
"product": {
"name": "golang-0:1.26.5-1.el9_2.src",
"product_id": "golang-0:1.26.5-1.el9_2.src",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang@1.26.5-1.el9_2?arch=src"
}
}
}
],
"category": "architecture",
"name": "src"
},
{
"branches": [
{
"category": "product_version",
"name": "golang-docs-0:1.26.5-1.el9_2.noarch",
"product": {
"name": "golang-docs-0:1.26.5-1.el9_2.noarch",
"product_id": "golang-docs-0:1.26.5-1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-docs@1.26.5-1.el9_2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-misc-0:1.26.5-1.el9_2.noarch",
"product": {
"name": "golang-misc-0:1.26.5-1.el9_2.noarch",
"product_id": "golang-misc-0:1.26.5-1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-misc@1.26.5-1.el9_2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-src-0:1.26.5-1.el9_2.noarch",
"product": {
"name": "golang-src-0:1.26.5-1.el9_2.noarch",
"product_id": "golang-src-0:1.26.5-1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-src@1.26.5-1.el9_2?arch=noarch"
}
}
},
{
"category": "product_version",
"name": "golang-tests-0:1.26.5-1.el9_2.noarch",
"product": {
"name": "golang-tests-0:1.26.5-1.el9_2.noarch",
"product_id": "golang-tests-0:1.26.5-1.el9_2.noarch",
"product_identification_helper": {
"purl": "pkg:rpm/redhat/golang-tests@1.26.5-1.el9_2?arch=noarch"
}
}
}
],
"category": "architecture",
"name": "noarch"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go-toolset-0:1.26.5-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64"
},
"product_reference": "go-toolset-0:1.26.5-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64"
},
"product_reference": "golang-0:1.26.5-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le"
},
"product_reference": "golang-0:1.26.5-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x"
},
"product_reference": "golang-0:1.26.5-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_2.src as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src"
},
"product_reference": "golang-0:1.26.5-1.el9_2.src",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-0:1.26.5-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64"
},
"product_reference": "golang-0:1.26.5-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-bin-0:1.26.5-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64"
},
"product_reference": "golang-bin-0:1.26.5-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-docs-0:1.26.5-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch"
},
"product_reference": "golang-docs-0:1.26.5-1.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-misc-0:1.26.5-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch"
},
"product_reference": "golang-misc-0:1.26.5-1.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_2.aarch64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_2.aarch64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_2.ppc64le as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le"
},
"product_reference": "golang-race-0:1.26.5-1.el9_2.ppc64le",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_2.s390x as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x"
},
"product_reference": "golang-race-0:1.26.5-1.el9_2.s390x",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-race-0:1.26.5-1.el9_2.x86_64 as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64"
},
"product_reference": "golang-race-0:1.26.5-1.el9_2.x86_64",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-src-0:1.26.5-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch"
},
"product_reference": "golang-src-0:1.26.5-1.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "golang-tests-0:1.26.5-1.el9_2.noarch as a component of Red Hat Enterprise Linux AppStream E4S (v.9.2)",
"product_id": "AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
},
"product_reference": "golang-tests-0:1.26.5-1.el9_2.noarch",
"relates_to_product_reference": "AppStream-9.2.0.Z.E4S"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27137",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-03-06T22:01:38.859733+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2445345"
}
],
"notes": [
{
"category": "description",
"text": "A certificate validation flaw has been discovered in the golang crypto/x509 module. When verifying a certificate chain which contains a certificate containing multiple email address constraints which share common local portions but different domain portions, these constraints will not be properly applied, and only the last constraint will be considered.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27137"
},
{
"category": "external",
"summary": "RHBZ#2445345",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2445345"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27137",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27137"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27137"
},
{
"category": "external",
"summary": "https://go.dev/cl/752182",
"url": "https://go.dev/cl/752182"
},
{
"category": "external",
"summary": "https://go.dev/issue/77952",
"url": "https://go.dev/issue/77952"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk",
"url": "https://groups.google.com/g/golang-announce/c/EdhZqrQ98hk"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4599",
"url": "https://pkg.go.dev/vuln/GO-2026-4599"
}
],
"release_date": "2026-03-06T21:28:13.748000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: Incorrect enforcement of email constraints in crypto/x509"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-33810",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-04-08T02:01:09.100830+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456335"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package within Go (golang). When verifying a certificate chain, excluded DNS (Domain Name System) constraints are not correctly applied to wildcard DNS Subject Alternative Names (SANs) if the case of the SAN differs from the constraint. This oversight could allow an attacker to bypass certificate validation, potentially leading to the acceptance of a malicious certificate that should have been rejected. This issue specifically impacts the validation of trusted certificate chains.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in the Go `crypto/x509` package that could allow an attacker to bypass certificate validation. The vulnerability arises from an incorrect application of excluded DNS constraints to wildcard DNS Subject Alternative Names (SANs) when their case differs from the constraint. This could lead to Red Hat products accepting malicious certificates from otherwise trusted chains, compromising the trust model.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33810"
},
{
"category": "external",
"summary": "RHBZ#2456335",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456335"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33810",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33810"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33810"
},
{
"category": "external",
"summary": "https://go.dev/cl/763763",
"url": "https://go.dev/cl/763763"
},
{
"category": "external",
"summary": "https://go.dev/issue/78332",
"url": "https://go.dev/issue/78332"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4866",
"url": "https://pkg.go.dev/vuln/GO-2026-4866"
}
],
"release_date": "2026-04-08T01:06:56.546000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:L/A:L",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Certificate validation bypass due to incorrect DNS constraint application"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33814",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:11.324941+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the HTTP/2 protocol implementation within the Go standard library (golang.org/x/net and net/http/internal/http2). A remote attacker can exploit this vulnerability by sending a specially crafted HTTP/2 SETTINGS frame with the SETTINGS_MAX_FRAME_SIZE parameter set to zero. This malicious frame causes the transport layer to enter an infinite loop of writing CONTINUATION frames, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in the Go HTTP/2 protocol implementation allows a remote, unauthenticated attacker to exhaust system resources. By sending a specially crafted HTTP/2 SETTINGS frame with a zero-value SETTINGS_MAX_FRAME_SIZE, the vulnerable Go library enters an infinite loop, impacting the availability of services utilizing HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33814"
},
{
"category": "external",
"summary": "RHBZ#2467815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33814",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33814"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33814"
},
{
"category": "external",
"summary": "https://go.dev/cl/761581",
"url": "https://go.dev/cl/761581"
},
{
"category": "external",
"summary": "https://go.dev/cl/761640",
"url": "https://go.dev/cl/761640"
},
{
"category": "external",
"summary": "https://go.dev/issue/78476",
"url": "https://go.dev/issue/78476"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4918",
"url": "https://pkg.go.dev/vuln/GO-2026-4918"
}
],
"release_date": "2026-05-07T19:41:17.631000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http/internal/http2: golang: golang.org/x/net: Go HTTP/2: Denial of Service via malformed SETTINGS_MAX_FRAME_SIZE frame"
},
{
"cve": "CVE-2026-39817",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-05-07T20:01:43.510043+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467825"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \"go tool pack\" subcommand, a component of the Go programming language tools. This vulnerability allows an attacker to craft a malicious archive file. When this archive is extracted using the \"pack\" subcommand, it can lead to arbitrary file writes on the filesystem, potentially allowing an attacker to create or modify files in unintended locations.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39817"
},
{
"category": "external",
"summary": "RHBZ#2467825",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467825"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39817",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39817"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39817"
},
{
"category": "external",
"summary": "https://go.dev/cl/767520",
"url": "https://go.dev/cl/767520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78778",
"url": "https://go.dev/issue/78778"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4979",
"url": "https://pkg.go.dev/vuln/GO-2026-4979"
}
],
"release_date": "2026-05-07T19:41:18.993000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go tool pack: Arbitrary file write via malicious archive extraction"
},
{
"cve": "CVE-2026-39819",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-05-07T20:01:04.403877+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467813"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the \u0027go bug\u0027 command within the Go programming language tools. This command writes to temporary files with predictable names. A local attacker with access to the system\u0027s temporary directory could exploit this by creating a symbolic link (symlink) with one of these predictable names. This would cause the \u0027go bug\u0027 command to overwrite the target of the symlink, potentially leading to arbitrary file overwrite.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39819"
},
{
"category": "external",
"summary": "RHBZ#2467813",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467813"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39819",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39819"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39819"
},
{
"category": "external",
"summary": "https://go.dev/cl/763882",
"url": "https://go.dev/cl/763882"
},
{
"category": "external",
"summary": "https://go.dev/issue/78584",
"url": "https://go.dev/issue/78584"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4978",
"url": "https://pkg.go.dev/vuln/GO-2026-4978"
}
],
"release_date": "2026-05-07T19:41:18.849000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go \u0027go bug\u0027 command: Arbitrary file overwrite via symlink attack"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39822",
"cwe": {
"id": "CWE-59",
"name": "Improper Link Resolution Before File Access (\u0027Link Following\u0027)"
},
"discovery_date": "2026-07-08T17:01:53.592869+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2498152"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `os.Root` functionality of Go on Unix systems. This vulnerability allows an attacker to bypass intended directory restrictions by crafting a path that ends with a symbolic link and a trailing slash. When a file is opened in `os.Root` with such a path, the symbolic link is improperly followed, potentially leading to access to locations outside of the defined root directory. This could result in information disclosure or unauthorized file system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang: Go os.Root: Symlink following vulnerability allows directory traversal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s os.Root implementation. On Unix systems, `os.Root.Open()` improperly follows symlinks to locations outside the root directory when the path ends with a trailing slash (e.g., root.Open(\"symlink/\")). This is because `openat()` with `O_NOFOLLOW` does not prevent symlink resolution when the path has a trailing /. An attacker able to create symlinks within an os.Root directory could use this to read or write files outside the intended root. The os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected. This issue is fixed in Go 1.25.12 and Go 1.26.5.\n\nThe following symbols are affected:\n* `OpenInRoot`: Opens a file or directory within an `os.Root`.\n* `Root.Create`: Creates a file inside an `os.Root`.\n* `Root.Open`: Opens a path relative to an `os.Root`.\n* `Root.OpenFile`: Opens a file with specified flags and permissions inside an `os.Root`.\n* `Root.OpenRoot`: Opens a sub-root directory from an `os.Root`.\n* `Root.ReadFile`: Reads a file inside an `os.Root`.\n* `Root.WriteFile`: Writes a file inside an `os.Root`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39822"
},
{
"category": "external",
"summary": "RHBZ#2498152",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2498152"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39822",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39822"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39822"
},
{
"category": "external",
"summary": "https://go.dev/cl/797880",
"url": "https://go.dev/cl/797880"
},
{
"category": "external",
"summary": "https://go.dev/issue/79005",
"url": "https://go.dev/issue/79005"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc",
"url": "https://groups.google.com/g/golang-announce/c/OrmQE_Yp5Sc"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4970",
"url": "https://pkg.go.dev/vuln/GO-2026-4970"
}
],
"release_date": "2026-07-08T15:46:27.199000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "There is no mitigation for this issue other than updating the Go toolchain to Go 1.25.12 or Go 1.26.5. Programs compiled with Go \u003e= 1.24 that do not use the os.Root API are not affected by this vulnerability.\nThe os.Root API was introduced in Go 1.24. Go versions prior to 1.24 are not affected.\nThis issue is fixed in Go 1.25.12 and Go 1.26.5.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang: Go os.Root: Symlink following vulnerability allows directory traversal"
},
{
"cve": "CVE-2026-39823",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-07T20:00:58.284024+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467811"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` package of Go. A remote attacker could exploit this vulnerability by inserting ASCII whitespaces around the equals sign (`=`) within a URL\u0027s content attribute inside a `\u003cmeta\u003e` tag. This improper escaping could lead to Cross-Site Scripting (XSS), allowing the attacker to execute malicious scripts in the user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat products ship the Go `html/template` package as a dependency of various Go-based components. The affected functionality involves URL escaping inside `\u003cmeta\u003e` tag content attributes, which requires an application to render user-controlled URLs in meta tags using `html/template`. While the vulnerable code is present, exploitation requires a specific usage pattern that is uncommon in Red Hat product code paths.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39823"
},
{
"category": "external",
"summary": "RHBZ#2467811",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467811"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39823",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39823"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39823"
},
{
"category": "external",
"summary": "https://go.dev/cl/769920",
"url": "https://go.dev/cl/769920"
},
{
"category": "external",
"summary": "https://go.dev/issue/78913",
"url": "https://go.dev/issue/78913"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4982",
"url": "https://pkg.go.dev/vuln/GO-2026-4982"
}
],
"release_date": "2026-05-07T19:41:19.524000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Ensure that user-supplied URLs are validated and sanitized before being passed to Go\u0027s `html/template` package for rendering in HTML meta tag content attributes. Avoid rendering untrusted URL data directly in meta tag content attributes.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via improper URL escaping in meta tag content"
},
{
"cve": "CVE-2026-39825",
"cwe": {
"id": "CWE-472",
"name": "External Control of Assumed-Immutable Web Parameter"
},
"discovery_date": "2026-05-07T20:01:37.714133+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467823"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http/httputil` package, specifically within the `ReverseProxy` component. This vulnerability allows the `ReverseProxy` to forward query parameters that are not visible to `Rewrite` functions. This occurs because the `ReverseProxy` does not correctly consider the `url.ParseQuery` limit on the total number of query parameters. A remote attacker could exploit this to send hidden query parameters, potentially bypassing security policies or controls implemented by `Rewrite` functions, leading to information disclosure or unexpected behavior.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in Go\u0027s net/http/httputil package where ReverseProxy can forward query parameters that are hidden from Rewrite or Director functions. This occurs when the number of query parameters exceeds the url.ParseQuery limit (controlled by the GODEBUG setting urlmaxqueryparams). While Red Hat ships Go-based components across many products, exploitation requires that an application use ReverseProxy with a Rewrite or Director function that relies on query parameter inspection for security enforcement, which limits the practical impact of this vulnerability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39825"
},
{
"category": "external",
"summary": "RHBZ#2467823",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467823"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39825",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39825"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39825"
},
{
"category": "external",
"summary": "https://go.dev/cl/770541",
"url": "https://go.dev/cl/770541"
},
{
"category": "external",
"summary": "https://go.dev/issue/78948",
"url": "https://go.dev/issue/78948"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4976",
"url": "https://pkg.go.dev/vuln/GO-2026-4976"
}
],
"release_date": "2026-05-07T19:41:18.453000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Increase the maximum number of query parameters allowed by setting the GODEBUG environment variable `urlmaxqueryparams` to a higher value (e.g., `GODEBUG=urlmaxqueryparams=20000`), or validate and enforce security controls on query parameters at the backend service rather than relying solely on the ReverseProxy\u0027s Rewrite or Director function for security filtering.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/http/httputil: golang: net/http/httputil: ReverseProxy forwards hidden query parameters, potentially bypassing security controls"
},
{
"cve": "CVE-2026-39826",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-07T20:01:46.305827+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467826"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in html/template. A trusted template author could craft a script tag with an empty or whitespace-only \u0027type\u0027 attribute. This vulnerability causes the template engine to incorrectly escape data passed into the script block, potentially leading to cross-site scripting (XSS). An attacker could leverage this to execute arbitrary client-side scripts in a user\u0027s browser.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate cross-site scripting (XSS) vulnerability in Go\u0027s html/template package occurs when a script tag with an empty or whitespace-only \u0027type\u0027 attribute is used in a template, causing the template engine to incorrectly escape data passed into the script block. This requires a trusted template author to introduce the vulnerable template pattern before an attacker can inject malicious scripts.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39826"
},
{
"category": "external",
"summary": "RHBZ#2467826",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467826"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39826",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39826"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39826"
},
{
"category": "external",
"summary": "https://go.dev/cl/771180",
"url": "https://go.dev/cl/771180"
},
{
"category": "external",
"summary": "https://go.dev/issue/78981",
"url": "https://go.dev/issue/78981"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4980",
"url": "https://pkg.go.dev/vuln/GO-2026-4980"
}
],
"release_date": "2026-05-07T19:41:19.138000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "html/template: golang: html/template: Cross-site scripting due to incorrect script tag escaping"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42501",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-07T20:00:54.811489+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467810"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Go command (`cmd/go`). A malicious module proxy can exploit this vulnerability by bypassing the validation of module checksums. This allows the proxy to serve altered versions of the Go toolchain, which the `go` command may then download and execute without proper verification. This can lead to the execution of untrusted code, compromising the integrity of the Go development environment.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Moderate impact flaw in the Go command (`cmd/go`) allows a malicious module proxy to bypass checksum validation, potentially leading to the execution of untrusted Go toolchains. Red Hat products utilizing the Go command are vulnerable if configured to use an untrusted module proxy or checksum database, as this could compromise the integrity of the Go development environment. Exploitation requires user interaction with a compromised proxy.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42501"
},
{
"category": "external",
"summary": "RHBZ#2467810",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467810"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42501",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42501"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42501"
},
{
"category": "external",
"summary": "https://go.dev/cl/775321",
"url": "https://go.dev/cl/775321"
},
{
"category": "external",
"summary": "https://go.dev/issue/79070",
"url": "https://go.dev/issue/79070"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4984",
"url": "https://pkg.go.dev/vuln/GO-2026-4984"
}
],
"release_date": "2026-05-07T19:41:19.691000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "To verify the integrity of Go module dependencies and detect potential tampering by a malicious proxy, users can revalidate all dependencies of the current module. This process involves removing the existing `go.sum` file and then re-generating and verifying module checksums.\n\nExecute the following commands in your module\u0027s root directory:\n```bash\nrm go.sum\ngo mod tidy\ngo mod verify\n```\nThis operation will re-download and re-verify all module dependencies. Be aware that this may affect your local module cache and could require re-building projects.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "cmd/go: golang: Go command (cmd/go): Integrity bypass due to checksum validation flaw via malicious module proxy"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42507",
"cwe": {
"id": "CWE-117",
"name": "Improper Output Neutralization for Logs"
},
"discovery_date": "2026-06-02T23:01:03.125126+00:00",
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484205"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the net/textproto package in Golang. When functions in this package return errors, they include their input as part of the error message. An attacker could exploit this by injecting misleading content into these error messages, which are then printed or logged. This could lead to confusion or misinterpretation of critical system information.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "RHBZ#2484205",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484205"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42507",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42507"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42507"
},
{
"category": "external",
"summary": "https://go.dev/cl/777060",
"url": "https://go.dev/cl/777060"
},
{
"category": "external",
"summary": "https://go.dev/issue/79346",
"url": "https://go.dev/issue/79346"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5039",
"url": "https://pkg.go.dev/vuln/GO-2026-5039"
}
],
"release_date": "2026-06-02T22:01:37.307000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T04:11:57+00:00",
"details": "For details on how to apply this update, which includes the changes described in this advisory, refer to:\n\nhttps://access.redhat.com/articles/11258",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61253"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:go-toolset-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.src",
"AppStream-9.2.0.Z.E4S:golang-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-bin-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-docs-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-misc-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.aarch64",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.ppc64le",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.s390x",
"AppStream-9.2.0.Z.E4S:golang-race-0:1.26.5-1.el9_2.x86_64",
"AppStream-9.2.0.Z.E4S:golang-src-0:1.26.5-1.el9_2.noarch",
"AppStream-9.2.0.Z.E4S:golang-tests-0:1.26.5-1.el9_2.noarch"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "net/textproto: golang: Golang net/textproto: Misleading error messages via input injection"
}
]
}
RHSA-2026:61314
Vulnerability from csaf_redhat - Published: 2026-08-31 07:19 - Updated: 2026-09-15 05:48Summary
Red Hat Security Advisory: Cluster Observability Operator 1.5.2
Severity
Important
Notes
Topic: The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).
Details: The 1.5.2 release of COO.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple 'baggage' header lines. The system's independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in Go's `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.
5.9 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.
8.7 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
32 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Vendor Fix
fix
|
Known not affected
65 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.
7.5 (High)
Affected products
Fixed
12 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Vendor Fix
fix
|
Known not affected
85 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — | ||
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Threats
Impact
Important
A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
89 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
93 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 | — |
Workaround
|
|
| Unresolved product id: Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 | — |
Workaround
|
Threats
Impact
Important
References
152 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "The Cluster Observability Operator (COO) is a Red Hat OpenShift Container Platform Operator that you can deploy to manage observability component stacks by using custom resource descriptions (CRDs).",
"title": "Topic"
},
{
"category": "general",
"text": "The 1.5.2 release of COO.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:61314",
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-13676",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-29181",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32281",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32285",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-35469",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39832",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46600",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-55677",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-73643",
"url": "https://access.redhat.com/security/cve/CVE-2026-73643"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification",
"url": "https://access.redhat.com/security/updates/classification"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html",
"url": "https://docs.openshift.com/container-platform/latest/observability/cluster_observability_operator/cluster-observability-operator-release-notes.html"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_61314.json"
}
],
"title": "Red Hat Security Advisory: Cluster Observability Operator 1.5.2",
"tracking": {
"current_release_date": "2026-09-15T05:48:01+00:00",
"generator": {
"date": "2026-09-15T05:48:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:61314",
"initial_release_date": "2026-08-31T07:19:28+00:00",
"revision_history": [
{
"date": "2026-08-31T07:19:28+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-04T00:36:24+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-15T05:48:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Cluster Observability Operator 1.5.0",
"product": {
"name": "Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:cluster_observability_operator:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "Cluster Observability Operator"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1787593799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1787594138"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3Af63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1787593637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-operator-bundle@sha256%3Aaf00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle\u0026tag=1787601373"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Ae952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1787593979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Aff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1787593778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1787593633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3A4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1787593661"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3Aff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1787593829"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1787593952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1787593634"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3Afbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1787594041"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Aef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1787594026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3Ade89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1787597621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1787593647"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1787597578"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3Af118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1787593671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Aedbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1787593846"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1787593632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1787593946"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3Ad922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1787593697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1787593705"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1787594087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Afb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1787593648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3Ac22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5?arch=amd64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1787593721"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Ac2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1787593799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3Aa60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1787594138"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1787593637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1787593979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3Ab53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1787593778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1787593633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3Aa9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1787593661"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3A1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1787593829"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3Adffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1787593952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1787593634"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1787594041"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3Af43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1787594026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1787597621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1787593647"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1787597578"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1787593671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1787593846"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1787593632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1787593946"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3A89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1787593697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3Aba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1787593705"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1787594087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3Ac77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1787593648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a?arch=arm64\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1787593721"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3Ab051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1787593799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3A7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1787594138"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1787593637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3A94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1787593979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3A4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1787593778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1787593633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3A2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1787593661"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3Aceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1787593829"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1787593952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1787593634"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3A78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1787594041"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1787594026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1787597621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3A956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1787593647"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3A41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1787597578"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3A28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1787593671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3A8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1787593846"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3A2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1787593632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1787593946"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3A24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1787593697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1787593705"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1787594087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1787593648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3A6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc?arch=ppc64le\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1787593721"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"product_identification_helper": {
"purl": "pkg:oci/alertmanager-rhel9@sha256%3A920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/alertmanager-rhel9\u0026tag=1787593799"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-health-analyzer-rhel9@sha256%3Ab06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9\u0026tag=1787594138"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"product_identification_helper": {
"purl": "pkg:oci/cluster-observability-rhel9-operator@sha256%3A8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator\u0026tag=1787593637"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"product_identification_helper": {
"purl": "pkg:oci/dashboards-console-plugin-rhel9@sha256%3Ae46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9\u0026tag=1787593979"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-rhel9@sha256%3A3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9\u0026tag=1787593778"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf4-rhel9@sha256%3A41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9\u0026tag=1787593633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf5-rhel9@sha256%3A0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9\u0026tag=1787593661"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"product_identification_helper": {
"purl": "pkg:oci/distributed-tracing-console-plugin-pf6-rhel9@sha256%3Af5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9\u0026tag=1787593829"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"product_identification_helper": {
"purl": "pkg:oci/korrel8r-rhel9@sha256%3A36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/korrel8r-rhel9\u0026tag=1787593952"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-rhel9@sha256%3A2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9\u0026tag=1787593634"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf4-rhel9@sha256%3Ae43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9\u0026tag=1787594041"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/logging-console-plugin-pf5-rhel9@sha256%3A60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9\u0026tag=1787594026"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-rhel9@sha256%3A48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9\u0026tag=1787597621"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf5-rhel9@sha256%3Aa9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9\u0026tag=1787593647"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"product_identification_helper": {
"purl": "pkg:oci/monitoring-console-plugin-pf6-rhel9@sha256%3Aa01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9\u0026tag=1787597578"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-rhel9-operator@sha256%3Ac321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator\u0026tag=1787593671"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-admission-webhook-rhel9@sha256%3Ab845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9\u0026tag=1787593846"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"product_identification_helper": {
"purl": "pkg:oci/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256%3Ac57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9\u0026tag=1787593632"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9@sha256%3A40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9\u0026tag=1787593946"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"product_identification_helper": {
"purl": "pkg:oci/perses-rhel9-operator@sha256%3A1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/perses-rhel9-operator\u0026tag=1787593697"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"product_identification_helper": {
"purl": "pkg:oci/prometheus-rhel9@sha256%3A9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/prometheus-rhel9\u0026tag=1787593705"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"product_identification_helper": {
"purl": "pkg:oci/thanos-rhel9@sha256%3A87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/thanos-rhel9\u0026tag=1787594087"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-rhel9@sha256%3A357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9\u0026tag=1787593648"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"product": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"product_id": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/troubleshooting-panel-console-plugin-pf6-rhel9@sha256%3Aaffc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e?arch=s390x\u0026repository_url=registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9\u0026tag=1787593721"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64 as a component of Cluster Observability Operator 1.5.0",
"product_id": "Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
},
"product_reference": "registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64",
"relates_to_product_reference": "Cluster Observability Operator 1.5.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-13676",
"cwe": {
"id": "CWE-551",
"name": "Incorrect Behavior Order: Authorization Before Parsing and Canonicalization"
},
"discovery_date": "2026-06-29T14:01:55.592330+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2494197"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in fast-uri. This vulnerability occurs because fast-uri fails to properly convert Unicode (Internationalized Domain Name - IDN) hostnames for HTTP-family URLs. This can lead to a situation where security policies, such as denylists or redirect validations, are bypassed when applications use fast-uri to enforce these policies before passing the URL to another parser. A remote attacker could exploit this to circumvent security controls and potentially access unauthorized resources or perform malicious redirects.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important flaw in `fast-uri` allows a remote attacker to bypass host-based security policies. Applications that rely on `fast-uri` for URL parsing and policy enforcement, such as denylists or redirect validations, can be circumvented due to inconsistent handling of Unicode hostnames. This discrepancy between `fast-uri` and other URL parsers could lead to unauthorized resource access or malicious redirects in affected Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-13676"
},
{
"category": "external",
"summary": "RHBZ#2494197",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2494197"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-13676",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-13676"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-13676"
},
{
"category": "external",
"summary": "https://cna.openjsf.org/security-advisories.html",
"url": "https://cna.openjsf.org/security-advisories.html"
},
{
"category": "external",
"summary": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6",
"url": "https://github.com/fastify/fast-uri/security/advisories/GHSA-4c8g-83qw-93j6"
}
],
"release_date": "2026-06-29T13:22:44.674000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "fast-uri: fast-uri: Security policy bypass due to improper Unicode hostname canonicalization"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-29181",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-07T21:01:21.484468+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456252"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go, the Go implementation of OpenTelemetry. A remote attacker can exploit this vulnerability by sending multiple \u0027baggage\u0027 header lines. The system\u0027s independent parsing and aggregation of each header field-value across multiple values can lead to amplified CPU and memory allocations, resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting Red Hat Multicluster Engine for Kubernetes. A remote attacker can exploit this flaw by sending multiple crafted `baggage` HTTP header lines, leading to excessive CPU and memory consumption and potentially rendering services unavailable. This impact is significant due to the potential for widespread disruption in a multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-29181"
},
{
"category": "external",
"summary": "RHBZ#2456252",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456252"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-29181",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-29181"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-29181"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-mh2q-q3fh-2475"
}
],
"release_date": "2026-04-07T20:29:13.933000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: OpenTelemetry-Go: Denial of Service via crafted multi-value baggage headers"
},
{
"cve": "CVE-2026-32281",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-04-08T02:01:00.930989+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456333"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Go\u0027s `crypto/x509` package. A remote attacker could exploit this by presenting a specially crafted certificate chain containing a large number of policy mappings. This inefficient validation process consumes excessive resources, which can lead to a denial of service (DoS) for applications or systems performing certificate validation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw occurs during the validation of otherwise trusted certificate chains that contain a large number of policy mappings, leading to excessive resource consumption. Exploitation requires an attacker to present a specially crafted, yet trusted, certificate chain which would require the attacker has already compromised a trusted certificate root. Red Hat continuously monitors certificate authorities and curates the set which is trusted by default for Red Hat products.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32281"
},
{
"category": "external",
"summary": "RHBZ#2456333",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456333"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32281",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32281"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32281"
},
{
"category": "external",
"summary": "https://go.dev/cl/758061",
"url": "https://go.dev/cl/758061"
},
{
"category": "external",
"summary": "https://go.dev/issue/78281",
"url": "https://go.dev/issue/78281"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4946",
"url": "https://pkg.go.dev/vuln/GO-2026-4946"
}
],
"release_date": "2026-04-08T01:06:58.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 5.9,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "crypto/x509: golang: Go crypto/x509: Denial of Service via inefficient certificate chain validation"
},
{
"cve": "CVE-2026-32285",
"cwe": {
"id": "CWE-1285",
"name": "Improper Validation of Specified Index, Position, or Offset in Input"
},
"discovery_date": "2026-03-26T20:01:54.925687+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2451846"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in github.com/buger/jsonparser. The Delete function, when processing malformed JSON input, fails to properly validate offsets. This vulnerability can lead to a negative slice index and a runtime panic, allowing a remote attacker to cause a denial of service (DoS) by providing specially crafted JSON data.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32285"
},
{
"category": "external",
"summary": "RHBZ#2451846",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2451846"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32285",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32285"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32285"
},
{
"category": "external",
"summary": "https://github.com/buger/jsonparser/issues/275",
"url": "https://github.com/buger/jsonparser/issues/275"
},
{
"category": "external",
"summary": "https://github.com/golang/vulndb/issues/4514",
"url": "https://github.com/golang/vulndb/issues/4514"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4514",
"url": "https://pkg.go.dev/vuln/GO-2026-4514"
}
],
"release_date": "2026-03-26T19:40:51.837000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/buger/jsonparser: github.com/buger/jsonparser: Denial of Service via malformed JSON input"
},
{
"cve": "CVE-2026-35469",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-04-13T03:52:35+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2457729"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the SPDY streaming code used by Kubelet, CRI-O, and kube-apiserver. An attacker with specific cluster roles, such as those allowing access to pod port forwarding, execution, or attachment, or node proxying, could exploit this vulnerability. This could lead to a Denial of Service (DoS) by causing the affected components to become unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw affecting OpenShift Container Platform. An attacker with specific elevated cluster roles, such as those permitting pod port forwarding, execution, attachment, or node proxying, could exploit a vulnerability in the SPDY streaming code of Kubelet, CRI-O, and kube-apiserver, leading to unresponsiveness of these critical components.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-35469"
},
{
"category": "external",
"summary": "RHBZ#2457729",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2457729"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-35469",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-35469"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-35469"
}
],
"release_date": "2026-04-13T23:59:59+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "To mitigate this issue, review and restrict the assignment of Kubernetes cluster roles `pods/portforward (create)`, `pods/exec (create)`, `pods/attach (create)`, and `nodes/proxy (get/create)` to untrusted users or service accounts. Ensure that only authorized and necessary entities possess these permissions. Modifying RBAC policies can impact the functionality of applications and services that rely on these permissions; careful testing is recommended.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "Kubelet: CRI-O: kube-apiserver: Kubelet, CRI-O, kube-apiserver: Denial of Service via SPDY streaming code"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39832",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:41.402561+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480685"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. When a key was added to a remote agent, security restrictions, known as constraint extensions, were not properly processed during the request. This allowed these restrictions to be silently removed when keys were forwarded, leading to the unrestricted use of the key on the remote host. This vulnerability could enable an attacker to bypass intended security controls and perform unauthorized actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/crypto/ssh/agent` allows for a security bypass when SSH keys with destination restrictions are forwarded via an SSH agent. This flaw could lead to unintended exposure of SSH keys, enabling an attacker to use the forwarded key without the specified restrictions on remote hosts. Red Hat products utilizing `golang.org/x/crypto/ssh/agent` for key forwarding may be affected if users rely on constraint extensions for limiting key usage.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39832"
},
{
"category": "external",
"summary": "RHBZ#2480685",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480685"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39832",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39832"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39832"
},
{
"category": "external",
"summary": "https://go.dev/cl/778642",
"url": "https://go.dev/cl/778642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79435",
"url": "https://go.dev/issue/79435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5006",
"url": "https://pkg.go.dev/vuln/GO-2026-5006"
}
],
"release_date": "2026-05-22T02:31:26.660000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to improper handling of key restrictions"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-46600",
"cwe": {
"id": "CWE-120",
"name": "Buffer Copy without Checking Size of Input (\u0027Classic Buffer Overflow\u0027)"
},
"discovery_date": "2026-07-21T20:01:59.038876+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504234"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/dns/dnsmessage. A remote attacker could send a specially crafted Service Binding (SVCB) or HTTPS resource record (RR) to a system using this component. When parsing this invalid record, the system may panic due to a parameter value overflowing the message buffer. This can lead to a Denial of Service (DoS) condition, making the affected system unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46600"
},
{
"category": "external",
"summary": "RHBZ#2504234",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504234"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46600",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46600"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46600"
},
{
"category": "external",
"summary": "https://go.dev/cl/786345",
"url": "https://go.dev/cl/786345"
},
{
"category": "external",
"summary": "https://go.dev/issue/79795",
"url": "https://go.dev/issue/79795"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5942",
"url": "https://pkg.go.dev/vuln/GO-2026-5942"
}
],
"release_date": "2026-07-21T19:18:59.755000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/dns/dnsmessage: golang.org/x/net/dns/dnsmessage: Denial of Service via invalid DNS record parsing"
},
{
"cve": "CVE-2026-55677",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-06-26T17:01:45.110038+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2493622"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Echo, a Go web framework. An attacker can exploit a disagreement in URL path decoding between the router and the static file handler. The router processes raw encoded paths, while the static file handler unescapes encoded forward slashes. This allows an attacker to bypass route-level access controls, leading to unauthorized information disclosure by reading static files.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important information disclosure flaw in the Echo web framework. The discrepancy in URL path decoding between the router and static file handler allows an unauthenticated attacker to bypass access controls and read arbitrary static files. This could lead to the exposure of sensitive data hosted on affected Red Hat products utilizing the Echo framework for serving static content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-55677"
},
{
"category": "external",
"summary": "RHBZ#2493622",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2493622"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-55677",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-55677"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-55677"
},
{
"category": "external",
"summary": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq",
"url": "https://github.com/labstack/echo/security/advisories/GHSA-vfp3-v2gw-7wfq"
}
],
"release_date": "2026-06-26T16:15:55.633000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/labstack/echo: Echo: Unauthorized Information Disclosure via URL Path Decoding Discrepancy"
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-73643",
"cwe": {
"id": "CWE-1333",
"name": "Inefficient Regular Expression Complexity"
},
"discovery_date": "2026-08-13T18:11:25.926202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515531"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in js-yaml, a JavaScript YAML parser. A remote attacker could exploit this vulnerability by providing specially crafted YAML input containing nested flow collections. This can lead to exponential parsing time when the application processes untrusted input, consuming excessive CPU resources. This resource exhaustion can block the Node.js event loop and cause a Denial of Service (DoS) for the affected process.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial-of-service flaw in the `js-yaml` library, where processing specially crafted YAML input can lead to exponential parsing time. This can cause applications utilizing affected versions of `js-yaml` within Red Hat products to consume excessive CPU resources, potentially blocking the Node.js event loop and leading to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x"
],
"known_not_affected": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-73643"
},
{
"category": "external",
"summary": "RHBZ#2515531",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515531"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-73643",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-73643"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-73643"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853",
"url": "https://github.com/nodeca/js-yaml/commit/3e5240f9cbe645ce5afb58524954a13c8539c853"
},
{
"category": "external",
"summary": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5",
"url": "https://github.com/nodeca/js-yaml/security/advisories/GHSA-pm4m-ph32-ghv5"
}
],
"release_date": "2026-08-13T17:47:30.404000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-08-31T07:19:28+00:00",
"details": "Before applying this update, make sure all previously released errata relevant to your system have been applied.\nFor details on how to apply this update, refer to: https://access.redhat.com/articles/11258",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:61314"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict applications from processing untrusted YAML input with affected versions of the `js-yaml` library. Implement strict input validation to ensure that only trusted and well-formed YAML data is processed. If the application is exposed to external, untrusted sources, consider isolating the application or implementing additional resource limits to prevent complete service disruption.",
"product_ids": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:51e1cee9ccde0bb3b363f59861a97da546215e0c012af6ef533d5e09387cb6ff_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:920567c0312f539ccce04ba94ed7539eb67a7e49fdd5479283be25be99a40780_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:b051bc5cd14f8c6bfcadbca3659c04afd027fdfd8c963296d0da7fbccf8b15b0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/alertmanager-rhel9@sha256:c2a60557eb2d933f41dc42c1b5116d3e9b27592e91a5839f142999cc9e5c49ee_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:5863e3e8fc305410f3611c5d234f58dadade652429f006cc9477494468d7f75b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:7e883fb088a584f5a7f33e50366d48c974488671da669c340470ddfee114b791_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:a60c396947cbeffba5016820ef23961370195bfedb9d1b47bd4d6da55a840ac2_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-health-analyzer-rhel9@sha256:b06af3129f86113372a7a3f0d0722b84910675a6cd7e30d5c87d4c3b7f163e66_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-operator-bundle@sha256:af00e7ae2fbc7056a5ce0de131e55a99ec0860099cb5df067c52ed5234da0b6d_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:1c7533751b55047dd1aa209676359b00dc4cc1471321017d817bb930136e23f4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:65522a8b12d1f2b188076b97ec5226b2d8cfcc6d2a589f0d9e54962f13a68f56_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:8fa4520a60aee92e2597cd431b103583421962e6754685fdedc0e96917b4bfde_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/cluster-observability-rhel9-operator@sha256:f63fa627d028c814dfce0d3ef0b06f5044ff193376c22e2fecc50e05fdfab9f1_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:7f94288c1b8457f679e63724465adcc98b35e1b37b2391cdf29930a47c3ba366_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:94faef76b872ec938af52f5403d6c76848b463948b7e6fac5b3904ce0ecb0cab_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e46afc8c13c15d444788b45414a25239b2ac1a7a273a316d8a43165f69022e33_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/dashboards-console-plugin-rhel9@sha256:e952b3783e077cc43a718bb9aae12577c43130899a6e0de6a64564ea7198405f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:04b2a23166e7edb28d543ca28dc9d1ee5436d2d587f7feb37cc55f39adb18169_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:2ab134074d750c76fcea617ac5b286ae2bb14a4a1f5d23d18afae524d60e0576_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:41d6a9aee2e7ebd6f5987133f7a1b5c5bb423ebd5a907321ef63d05313c98036_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf4-rhel9@sha256:8ba6ed81afcc3647fee542d3697a2ff321f0af7983464a1b0e16bf8ccf5b7c6a_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:0c3825a2153cc886a67d93c7034ab8d8cb1ee6dc7ecb6d7626e27644315ffcc9_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:2091f9940bad29d2273bee635d1d4d736c7aca41b504c4a4ceacb2ccd9d3cc8c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:4591e1d37c2307adec5602bf28f30d7b297b2aaf2b89ea48671a25e9635066ce_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf5-rhel9@sha256:a9a51e2c9476f02df0fb922b20283baa55c82ca5b30983fe31c4fdcb07ef1b9e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:1cf801a07119fd084d79a9c26b84dbd07ada25cb219423bc121a2c870e0dab0b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ceeabd18a61070a03ab9466f156734d273ddc9433b6b1a0afd40f22f78545df1_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:f5fb9e4438247a775d2bb59856cb35fab46e752f32720eb55468bee896168f84_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-pf6-rhel9@sha256:ff10f227a1b0930cf1a3c7c204ac44db04ab476acebc0b12159546dbe81f4ce6_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:3ffc92ed6d256b64a9796886f891a6109ef1ce6926642bc4ce10a25c7b5bbc00_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:4ff7fb8d5f7366fa6d43c160537e95096fdb3708637b778f8b8c38ca755f1469_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:b53a0a66d7ee21e4e2694b14fd13957961e6d1643e097ab367dc2c0cbf42075e_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/distributed-tracing-console-plugin-rhel9@sha256:ff11e8a37f2662c356c476e426a6f90f780951fc30645c6fccc32fc5934cc481_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:36d58edd2a61d76d2d84bfb13cfb892ea1d14fc5fb07602c6f4b050a0ec01509_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:7991014409d5192eb9712bed519fb503230ac1d6e1c6892bca9813dfd5417378_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:999ad3f557a7d1503602f2fc8dd634b4ccc285d0f21e1e3f361ab39f3e1f8313_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/korrel8r-rhel9@sha256:dffe87941731629f5080ec9587e2e2f64c9019a9eb24d9e25154e0b926673543_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:78c6c60cb8a9ff834d45bcea21c2d74a92da81aeddbffd83c5777da55befb686_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:99f0605f1f264e2528012a0f39d328b3c15a57d2c538c1ec2693f4230bd8580d_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:e43d7c7195b9ca9e306d6f90f6469e4e6caf1728645cd9275177a8e8345bc18f_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf4-rhel9@sha256:fbe424a5ae002a03dcdb73c97e71542ee6ed14e9cbb796ba89ad949a5002892b_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:28c209f3065021094370376b1468996a915df1d3d06f31b4da76aa93866cf9e2_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:60301acc56a12cf8c23be584caf56e2b3104b28944ed03d90cbeec408a7e86b2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:ef0378fb3f71862ba56c9cf6e45662ec7a20aeefd039b7d0988343992b23775c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-pf5-rhel9@sha256:f43fd45ce1898ee832d052e6a41391414fd2ca3c659772a6be2b67876bac5bc8_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:2301cb3015114a2d94b7b6d8f6ca743be503a67ca83a4595e86a4026f920821d_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:5059f3edf8ae7fc5c52c3a0b59324929432dcb4f363d3f5c3b22c462bf6ab02d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:77f8b1685e68fdd513e0e22868d6753a38fd8031be239262431a413251f05714_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/logging-console-plugin-rhel9@sha256:88ad68ca1e9b3be4a0c110d4d96b8addd4b3f443081da029bc50d5fd7beac979_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:2d58725053913c292d7a6c83bb79e1bf46d206bf539cac88f54883ca6e28f115_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:50a9f9c45a9cb5fbaabfef2ee47e7f0e0ffd24aae86af94a82e5d4d5afcb0993_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:956b200a2163d25dc2fbbff072119a0052cd2121903b83019077c6f52177dc6b_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf5-rhel9@sha256:a9d975ae6a02e1d3de795a0c675798bfbec571c442da058c6b0cb05b7ab6d100_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:41e65e9b9918bbdf837d67312650b843139dfbe2c168bf0cd94d76eb67f57c02_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:6f858505f5c4b4c7eeb5c8cfb688be99f3a379ffd326416f1217dbb0be2a82d5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:792106125d32dcad113fc6a34c7fcb2233ade4c6af4ca0e52da10f4708043ede_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-pf6-rhel9@sha256:a01bd40afc6933af137e4ba5c3538942010cabc2707d197c4d14c1fba1aba2ee_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:1d5002ef3b179fd7b0e1119f9326d25106d556f3088bcdaa3429d8fc67a4d5d0_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:48c7f33882b95235384e637de0ef86aaad9663a55b6b5a873e11dd28ec9d8e01_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:924353821d6a07ce8aa328dc072e30c130ad94aaebc2242e3c14d791676f7dba_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/monitoring-console-plugin-rhel9@sha256:de89177be37e242de873ac59ba6977b2e41bbab47e6bfe2814a407b9df2f4029_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:0ca0780667a208a2ffc6fc0eac944a535bcb25cfa4e158c4ada3250379b20c16_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:8b8ef0c498ad0d854dc30bc66323904483ce7a2c749c4651a1a9b6ccfe245909_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:b845ac3a1039c55d8094622a17bba207bdb5d1e0c5675b6450b28f10b6d6a968_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-admission-webhook-rhel9@sha256:edbbe8fb3dce5707f10ecf2652c6442637b9a83826a6e0ccc668f218c19bb321_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2388606bc95d18722e6fc9e15c229d7d076904887a7d5b430d00a6f9e7abfe0e_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:2b563a44bbb7b054cfb1ed4d2578ab9f43b06e8b649e37371d923c5f7548ba6d_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:7724f6baa2c03283672666c44fd6a51f1f1dbf32a87a64717d739ecc182970be_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-operator-prometheus-config-reloader-rhel9@sha256:c57f6c436a12f925903624dcf40b2b8a28d4cf2e69eada59249c722ec1bed926_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:28ec67b5f353dfad3b7aab1882aeff99c028397cf7e760af6687b6f8745988ca_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:4c87c8336ed3d1d2ef2e5e74563a7beb99ef582e61aecdca9ba6bbd9d471749a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:c321abf472b62281ec032313c5fb9eb4c72ba34249d84e39dad936efd373f7c6_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/obo-prometheus-rhel9-operator@sha256:f118f0f91c83def5739e5d34df7d7b4dfa7aedae8ac8b772e60a697ab3f63c3f_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:1d1ee8463e8ec2f5323e6d2ebd1971a39f472f60dc21d155f99a8e12a82a44f3_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:24c4efec8ba97d67b8a3494c3a699f58ad691c4a7b325562384258cc11b02160_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:89f070cda4c5ed09bb3abc3afa95d19e8c79c0d635649065127456c29865c74b_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9-operator@sha256:d922a333dbcd86ee5971c04690b544228d76a72109e2a89a347bd56e4ecfaefb_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:3319c9cc20bd47d7e85925611b16c155607b3131e1a62e599573808d4359c78c_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:40534afd7af89f72465580eda4d731a9ae47f6b3e126187b0fd4ffa7667bc75e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:8e2e7d82bb5ac1456e8cff1260c4bc82bd68a3718a1e5c53e12e8fccb8b4d20c_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/perses-rhel9@sha256:97031c73069fbf2fc59ef4afc599233be3ec3fe3cb4238a750eb4dba7d741fbf_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:13adc38975905f713babacbfa42080dda94a0aa244d6a6b4692434724dc2a365_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:3ab6db595ed848b654b016460f785181721d66d616ab367c81a85d63ee55d172_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:9cdc53c7e915995293f06e423335527dfd5a9bf1b9080b1cdfd59b42f4afa3db_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/prometheus-rhel9@sha256:ba963271dda3bf3cb1e326a0af07c281c89e0cd1ba04e5d35886a90ee6372dde_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:5b53a6cd089aea290f017a6085e5f171bab22fc2143a6d7876ee4d386890370c_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79b9a6abbc1d78e4ae55e89c628513b44d31c3ea51f6be7e65564333a32b7cf4_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:79f4fc6e9d70186e0cb84650e9445b0a0349170fca65f82338e110836d07a838_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/thanos-rhel9@sha256:87b54fd69b87f7145e1340ac1e43183ade3c19ac7b8dd240f307c985885b6751_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:595c64b39eee5af677b740fc82711c2625716d054aaff3022f8574cb80a5fc5a_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:6ac1def316443dee736fbe5d208c173345edf6c3efd898396b946d594e1449cc_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:affc662c5432c39517c297d9153db78e9a484ba666276e6d1f8ffa7bc9f8099e_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-pf6-rhel9@sha256:c22ce84d3eb713619571109324c691444e99e2552147b3303f010f534639dcc5_amd64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:357b78738283f00527dc2cd2d6876df0a98029cb1dd341f97f9fefdb2b3f07e2_s390x",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:51983a2016149497aacc6a66ff1705d02977002998d2b53e40f4981711d5f34e_ppc64le",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:c77c01deb6283f76c0a0e4ba9992adae9307549a550622a78ec93ca04a85cec5_arm64",
"Cluster Observability Operator 1.5.0:registry.redhat.io/cluster-observability-operator/troubleshooting-panel-console-plugin-rhel9@sha256:fb4e8bcd13f922e9453c4f9a41464047b7b7f394e59c391716516552ebb47fe3_amd64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "js-yaml: js-yaml: Denial of Service via exponential parsing in flow collections"
}
]
}
RHSA-2026:63016
Vulnerability from csaf_redhat - Published: 2026-09-03 04:36 - Updated: 2026-09-15 06:18Summary
Red Hat Security Advisory: Submariner v0.24 security fixes and container updates
Severity
Important
Notes
Topic: Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images.
Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.
Red Hat Advanced Cluster Management for Kubernetes v2.17
Details: Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.
For more information about Submariner, see the Submariner open source community website at: https://submariner.io/.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — | ||
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service (DoS). The vulnerability arises from improper handling of a PROXY v2 header with a non-UDP transport type, which results in a nil pointer dereference.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters' endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.
6.5 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.
5.4 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster's etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.
5.8 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image.
4.4 (Medium)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker's tunnel, potentially leading to unauthorized information disclosure or network disruption.
CWE-732 - Incorrect Permission Assignment for Critical ResourceAffected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.
9.1 (Critical)
Affected products
Fixed
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
5 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters' lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.
5.4 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters, including critical system namespaces like kube-system and openshift-*. This could lead to privilege escalation or other forms of system compromise within the cluster.
CWE-1104 - Use of Unmaintained Third Party ComponentsAffected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
17 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 | — |
Workaround
|
|
| Unresolved product id: Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 | — |
Workaround
|
Threats
Impact
Important
References
85 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Submariner v0.24 General Availability release images, which provide enhancements, security fixes, and updated container images.\n\nRed Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE links in the References section.\nRed Hat Advanced Cluster Management for Kubernetes v2.17",
"title": "Topic"
},
{
"category": "general",
"text": "Submariner is a Kubernetes operator that enables cross-cluster connectivity for services and pods, implementing KEP-1645 (Multi-Cluster Services API). After deploying the Submariner operator, it can enable direct networking between pods and services across different Kubernetes clusters.\n\nFor more information about Submariner, see the Submariner open source community website at: https://submariner.io/.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:63016",
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-62309",
"url": "https://access.redhat.com/security/cve/CVE-2026-62309"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66780",
"url": "https://access.redhat.com/security/cve/CVE-2026-66780"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66781",
"url": "https://access.redhat.com/security/cve/CVE-2026-66781"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66782",
"url": "https://access.redhat.com/security/cve/CVE-2026-66782"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66783",
"url": "https://access.redhat.com/security/cve/CVE-2026-66783"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66785",
"url": "https://access.redhat.com/security/cve/CVE-2026-66785"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66786",
"url": "https://access.redhat.com/security/cve/CVE-2026-66786"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66787",
"url": "https://access.redhat.com/security/cve/CVE-2026-66787"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-66788",
"url": "https://access.redhat.com/security/cve/CVE-2026-66788"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_63016.json"
}
],
"title": "Red Hat Security Advisory: Submariner v0.24 security fixes and container updates",
"tracking": {
"current_release_date": "2026-09-15T06:18:01+00:00",
"generator": {
"date": "2026-09-15T06:18:01+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:63016",
"initial_release_date": "2026-09-03T04:36:21+00:00",
"revision_history": [
{
"date": "2026-09-03T04:36:21+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-03T04:36:44+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-15T06:18:01+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product": {
"name": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:acm:2.17::el9"
}
}
}
],
"category": "product_family",
"name": "Red Hat Advanced Cluster Management for Kubernetes"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1788023916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1788023940"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/nettest-rhel9@sha256%3A1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1788166791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"product_identification_helper": {
"purl": "pkg:oci/subctl-rhel9@sha256%3Ad5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1788105072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-operator-bundle@sha256%3Aa8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-operator-bundle\u0026tag=1788217593"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1788043964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1788043961"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-rhel9-operator@sha256%3A1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1788073481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3Acd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d?arch=amd64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1788043970"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1788023916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1788023940"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"product_identification_helper": {
"purl": "pkg:oci/nettest-rhel9@sha256%3Ad4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1788166791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"product_identification_helper": {
"purl": "pkg:oci/subctl-rhel9@sha256%3A1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1788105072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-gateway-rhel9@sha256%3Abdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1788043964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1788043961"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-rhel9-operator@sha256%3A93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1788073481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64",
"product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3Ace038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f?arch=arm64\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1788043970"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3Aecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1788023916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3A4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1788023940"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/nettest-rhel9@sha256%3A341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1788166791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/subctl-rhel9@sha256%3Aa8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1788105072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1788043964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3A38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1788043961"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/submariner-rhel9-operator@sha256%3A5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1788073481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea?arch=ppc64le\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1788043970"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"product_id": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-agent-rhel9@sha256%3A5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-agent-rhel9\u0026tag=1788023916"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"product_id": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"product_identification_helper": {
"purl": "pkg:oci/lighthouse-coredns-rhel9@sha256%3Ad58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/lighthouse-coredns-rhel9\u0026tag=1788023940"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"product_id": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"product_identification_helper": {
"purl": "pkg:oci/nettest-rhel9@sha256%3Acdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/nettest-rhel9\u0026tag=1788166791"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"product_id": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"product_identification_helper": {
"purl": "pkg:oci/subctl-rhel9@sha256%3Afb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/subctl-rhel9\u0026tag=1788105072"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"product_id": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"product_identification_helper": {
"purl": "pkg:oci/submariner-gateway-rhel9@sha256%3A73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-gateway-rhel9\u0026tag=1788043964"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"product_id": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"product_identification_helper": {
"purl": "pkg:oci/submariner-globalnet-rhel9@sha256%3Af2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-globalnet-rhel9\u0026tag=1788043961"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"product_id": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"product_identification_helper": {
"purl": "pkg:oci/submariner-rhel9-operator@sha256%3A0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-rhel9-operator\u0026tag=1788073481"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"product": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"product_id": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"product_identification_helper": {
"purl": "pkg:oci/submariner-route-agent-rhel9@sha256%3A96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5?arch=s390x\u0026repository_url=registry.redhat.io/rhacm2/submariner-route-agent-rhel9\u0026tag=1788043970"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64 as a component of Red Hat Advanced Cluster Management for Kubernetes 2.17",
"product_id": "Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
},
"product_reference": "registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64",
"relates_to_product_reference": "Red Hat Advanced Cluster Management for Kubernetes 2.17"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-62309",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-07-16T21:00:59.732476+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2501535"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in CoreDNS. A remote attacker can send a specially crafted 28-byte UDP datagram to a CoreDNS server with the proxyproto plugin enabled. This malformed datagram can cause the CoreDNS process to crash, leading to a denial of service (DoS). The vulnerability arises from improper handling of a PROXY v2 header with a non-UDP transport type, which results in a nil pointer dereference.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/coredns/coredns: CoreDNS: Denial of Service via crafted UDP datagram with proxyproto plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability is rated as Important because a remote unauthenticated attacker can trigger a denial of service in CoreDNS by sending a specially crafted UDP datagram. This occurs when the `proxyproto` plugin is enabled, leading to a process crash. Red Hat products utilizing CoreDNS with this plugin enabled are susceptible to service disruption.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-62309"
},
{
"category": "external",
"summary": "RHBZ#2501535",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2501535"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-62309",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-62309"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-62309",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-62309"
},
{
"category": "external",
"summary": "https://github.com/coredns/coredns/commit/60a439dd4febfcd78e3779e952fe3fbf3c16bb1f",
"url": "https://github.com/coredns/coredns/commit/60a439dd4febfcd78e3779e952fe3fbf3c16bb1f"
},
{
"category": "external",
"summary": "https://github.com/coredns/coredns/pull/8154",
"url": "https://github.com/coredns/coredns/pull/8154"
},
{
"category": "external",
"summary": "https://github.com/coredns/coredns/releases/tag/v1.14.4",
"url": "https://github.com/coredns/coredns/releases/tag/v1.14.4"
},
{
"category": "external",
"summary": "https://github.com/coredns/coredns/security/advisories/GHSA-9rvv-m5g5-wc8r",
"url": "https://github.com/coredns/coredns/security/advisories/GHSA-9rvv-m5g5-wc8r"
}
],
"release_date": "2026-07-16T19:42:17.867000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "To mitigate this vulnerability, disable the `proxyproto` plugin in your CoreDNS configuration if it is not strictly required. If the `proxyproto` plugin is essential for your deployment, restrict network access to the CoreDNS service to only trusted sources. This can be achieved by configuring firewall rules to limit UDP traffic on the CoreDNS port. Any changes to the CoreDNS configuration will require a restart or reload of the CoreDNS service to take effect, which may temporarily disrupt DNS resolution.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/coredns/coredns: CoreDNS: Denial of Service via crafted UDP datagram with proxyproto plugin"
},
{
"cve": "CVE-2026-66780",
"cwe": {
"id": "CWE-532",
"name": "Insertion of Sensitive Information into Log File"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507524"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the submariner-operator component. The `submariner-k8s-broker-cluster` Role, which is assigned to joined clusters, possesses excessive permissions. This allows a compromised cluster to alter network configurations, specifically by overwriting other clusters\u0027 endpoint information. Consequently, an attacker can redirect inter-cluster tunnel traffic, enabling a Man-in-the-Middle (MITM) attack across the entire cluster mesh.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner-operator: Broker ServiceAccount Secret (token + CA) logged in full at TRACE verbosity",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Critical: Red Hat Advanced Cluster Management for Kubernetes is vulnerable to a critical flaw in the submariner-operator where a compromised spoke cluster can achieve a Man-in-the-Middle (MITM) attack across the entire cluster mesh. This is due to the `submariner-k8s-broker-cluster Role` granting overly broad permissions, allowing any joined cluster to modify endpoint configurations for all other clusters within the broker namespace. This broad access enables an attacker to redirect inter-cluster tunnel traffic.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66780"
},
{
"category": "external",
"summary": "RHBZ#2507524",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507524"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66780",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66780"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66780",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66780"
}
],
"release_date": "2026-08-18T16:35:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "submariner-operator: Broker ServiceAccount Secret (token + CA) logged in full at TRACE verbosity"
},
{
"cve": "CVE-2026-66781",
"cwe": {
"id": "CWE-749",
"name": "Exposed Dangerous Method or Function"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507526"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Submariner operator. The Submariner Custom Resource (CR), used for configuring network connectivity, stores the IPsec pre-shared key (PSK) in an unencrypted format. This key, which is critical for securing communication between Kubernetes clusters, can be accessed by unauthorized parties. Such access enables an attacker to passively decrypt network traffic flowing between any two clusters in the mesh, resulting in sensitive information disclosure.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in submariner-operator exposes the IPsec pre-shared key (PSK) in cleartext within the Submariner Custom Resource (CR) specification. As Custom Resources are not encrypted by default in etcd on OpenShift, and the PSK is identical across all clusters in a mesh, its disclosure via `kubectl get submariner -o yaml` or through must-gather bundles allows an attacker with appropriate permissions to passively decrypt traffic between any two connected clusters.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66781"
},
{
"category": "external",
"summary": "RHBZ#2507526",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507526"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66781",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66781"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66781",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66781"
}
],
"release_date": "2026-08-18T16:35:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "To mitigate the risk of IPsec pre-shared key (PSK) disclosure, implement strict Kubernetes Role-Based Access Control (RBAC) policies to limit access to Submariner Custom Resources. Ensure that only authorized administrators and systems are granted permissions to view `submariner` Custom Resources within their namespaces. Additionally, exercise caution when collecting and storing diagnostic data, such as must-gather bundles, and when managing GitOps repositories, as these may inadvertently expose the cleartext PSK.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "submariner-operator: pprof debug endpoint enabled by default on 0.0.0.0:8082 without authentication"
},
{
"cve": "CVE-2026-66782",
"cwe": {
"id": "CWE-269",
"name": "Improper Privilege Management"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507527"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Submariner operator. This vulnerability allows for the exposure of a long-lived broker service account (SA) bearer token within the Submariner Custom Resource (CR) specification. An attacker with access to the cluster\u0027s etcd database or through `kubectl get` commands could obtain this token. The possession of this token grants full control over the mesh network, enabling unauthorized management of network resources such as endpoints and secrets.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner-operator: Operator ClusterRole grants cluster-wide create/update on all ConfigMaps",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: In Red Hat Advanced Cluster Management for Kubernetes, the Submariner operator may allow sensitive broker ServiceAccount bearer tokens to be stored in cleartext within the Submariner Custom Resource (CR) specification. This configuration exposes the token to cluster administrators or any entity with read access to the CR, potentially granting full mesh control over the Submariner network. This risk is heightened by the token\u0027s long-lived nature and its exposure through standard Kubernetes tools like `kubectl get` and `must-gather`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66782"
},
{
"category": "external",
"summary": "RHBZ#2507527",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507527"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66782",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66782"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66782",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66782"
}
],
"release_date": "2026-08-18T16:35:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "To mitigate this issue, ensure that access to Submariner Custom Resources (CRs) is strictly controlled. Implement Kubernetes Role-Based Access Control (RBAC) policies to limit read access to Submariner CRs only to authorized administrators and components that explicitly require it. This reduces the risk of unauthorized disclosure of the broker Service Account bearer token, which may be stored in cleartext within the CR\u0027s specification field. Review existing RBAC configurations to ensure least privilege is applied to resources containing sensitive information.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 5.8,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "submariner-operator: Operator ClusterRole grants cluster-wide create/update on all ConfigMaps"
},
{
"cve": "CVE-2026-66783",
"cwe": {
"id": "CWE-1357",
"name": "Reliance on Insufficiently Trustworthy Component"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507528"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `submariner-operator` component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability allows a cluster administrator, or any user with permissions to modify the Submariner Custom Resource (CR), to specify an unvalidated image path. This lack of validation enables an attacker to execute arbitrary code with elevated privileges across the entire cluster, including control-plane nodes, by deploying a malicious image.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner-operator: Release workflow consumes same-org composite action via mutable @devel branch ref",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important flaw in submariner-operator that allows a cluster administrator, or an attacker with equivalent privileges to patch the Submariner Custom Resource, to execute arbitrary privileged code across all cluster nodes, including control-plane nodes. This is due to a lack of image validation when overriding component images, enabling the deployment of malicious images with extensive privileges.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66783"
},
{
"category": "external",
"summary": "RHBZ#2507528",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507528"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66783",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66783"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66783",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66783"
}
],
"release_date": "2026-08-18T16:35:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict access to cluster-admin roles and carefully control permissions for users or service accounts that can modify Submariner Custom Resources. Ensure that only trusted and authorized personnel have the ability to patch Submariner CRs, thereby preventing the injection of malicious images.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 4.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "submariner-operator: Release workflow consumes same-org composite action via mutable @devel branch ref"
},
{
"cve": "CVE-2026-66785",
"cwe": {
"id": "CWE-732",
"name": "Incorrect Permission Assignment for Critical Resource"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507530"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Submariner. This vulnerability allows a malicious cluster (spoke) to redirect network traffic from other connected clusters (peer clusters) by publishing a specially crafted network endpoint. The system fails to properly validate the network subnets provided by the malicious cluster, enabling it to declare arbitrary network ranges. Consequently, all network traffic intended for these arbitrary ranges from peer clusters will be rerouted through the attacker\u0027s tunnel, potentially leading to unauthorized information disclosure or network disruption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner: IPsec PSK secrets file created with default world-readable permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important vulnerability in Red Hat Advanced Cluster Management for Kubernetes. A malicious spoke cluster can exploit unvalidated Submariner Endpoint configurations to inject arbitrary network routes, potentially hijacking traffic from other connected clusters. This could lead to unauthorized data interception or redirection within the multi-cluster environment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66785"
},
{
"category": "external",
"summary": "RHBZ#2507530",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507530"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66785",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66785"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66785",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66785"
}
],
"release_date": "2026-08-20T17:20:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 2.5,
"baseSeverity": "LOW",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:L/I:N/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "submariner: IPsec PSK secrets file created with default world-readable permissions"
},
{
"cve": "CVE-2026-66786",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507531"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in submariner. In cert-auth mode, the connection configuration is built using free-form strings from the Custom Resource Definition (CRD) without proper validation. A malicious cluster can exploit this by publishing a CableName that includes newlines and ipsec.conf directives. This allows an attacker to inject arbitrary configuration parameters or execute commands through leftupdown hooks, leading to remote code execution as root on the gateway node.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "submariner: submariner: ipsec.conf stanza injection via remote-supplied CableName and Subnets",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this flaw as Moderate severity rather than Important because exploitation requires two non-default configurations that must both be explicitly enabled by an administrator. The vulnerable code path exists only in Submariner\u0027s certificate-based IPsec authentication mode, which is disabled by default (`IPSecCertAuthMode` defaults to `false`). This mode is designed specifically for integration with OVN-Kubernetes IPsec, which is itself an optional intra-cluster encryption feature that is also disabled by default. The standard Submariner deployment, including multi-cloud and cross-datacenter configurations managed through Red Hat Advanced Cluster Management, uses pre-shared key (PSK) authentication, which establishes IPsec tunnels through a structurally different code path (`ipsec whack` command-line arguments via Go\u0027s `exec.Command`) that is not susceptible to this injection. Additionally, exploitation requires that an attacker has already compromised a managed spoke cluster at the cluster-admin level in order to extract the Submariner broker credentials, and must then bypass all normal Submariner automation to craft and submit a malicious Endpoint resource directly to the broker API, enabling cross-cluster lateral movement to other clusters within the same ManagedClusterSet. Clusters in other ManagedClusterSets have separate broker credentials and are not reachable through this attack.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66786"
},
{
"category": "external",
"summary": "RHBZ#2507531",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507531"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66786",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66786"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66786",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66786"
}
],
"release_date": "2026-08-21T16:43:00.583000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "If Submariner certificate-based IPsec authentication mode is enabled (`IPSecCertAuthMode: true` in the SubmarinerConfig), administrators can mitigate this flaw by switching to the default pre-shared key (PSK) authentication mode. Set `IPSecCertAuthMode: false` (or remove the field to use its default value) in the SubmarinerConfig CR and redeploy the Submariner gateway pods. PSK mode provides equivalent inter-cluster IPsec tunnel encryption and is not affected by this vulnerability. Note that disabling cert-auth mode means Submariner will no longer integrate with OVN IPsec\u0027s certificate infrastructure and will manage its own PSK-based authentication independently.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 9.1,
"baseSeverity": "CRITICAL",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "HIGH",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "submariner: submariner: ipsec.conf stanza injection via remote-supplied CableName and Subnets"
},
{
"cve": "CVE-2026-66787",
"cwe": {
"id": "CWE-489",
"name": "Active Debug Code"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507532"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the lighthouse component of Red Hat Advanced Cluster Management for Kubernetes. This vulnerability stems from insufficient validation of advertised IP addresses within EndpointSlice objects. A compromised spoke cluster can exploit this by creating EndpointSlices with attacker-controlled IP addresses, causing other clusters\u0027 lighthouse DNS to redirect legitimate service traffic to malicious endpoints. This enables a remote attacker to conduct transparent Man-in-the-Middle (MITM) attacks on cross-cluster service communications, potentially leading to unauthorized information disclosure and data manipulation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lighthouse: Go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in Red Hat Advanced Cluster Management for Kubernetes allows a compromised spoke cluster to perform cross-cluster DNS spoofing. By creating unvalidated EndpointSlice objects with attacker-controlled IP addresses, a malicious actor can redirect legitimate service traffic between clusters, enabling transparent Man-in-the-Middle attacks without altering the target service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66787"
},
{
"category": "external",
"summary": "RHBZ#2507532",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507532"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66787",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66787"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66787",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66787"
}
],
"release_date": "2026-08-20T17:20:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "ADJACENT_NETWORK",
"availabilityImpact": "LOW",
"baseScore": 5.4,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lighthouse: Go pprof profiling endpoint enabled unconditionally on lighthouse-agent :8082"
},
{
"cve": "CVE-2026-66788",
"cwe": {
"id": "CWE-1104",
"name": "Use of Unmaintained Third Party Components"
},
"discovery_date": "2026-07-27T00:00:00+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2507533"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Lighthouse. A remote attacker, by compromising a spoke cluster, can exploit a vulnerability where the destination namespace for resource injection is derived from an attacker-controlled label or annotation on the broker object. This allows the attacker to inject unauthorized EndpointSlices and ServiceImports into any namespace on peer clusters, including critical system namespaces like kube-system and openshift-*. This could lead to privilege escalation or other forms of system compromise within the cluster.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "lighthouse: Dockerfile build stages use end-of-life Fedora 40 referenced by mutable tag",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in Red Hat Advanced Cluster Management for Kubernetes allows a compromised spoke cluster to inject EndpointSlices and ServiceImports into arbitrary namespaces on peer clusters, including critical system namespaces. The `lighthouse-agent` service account uses an attacker-controlled label for the destination namespace without validation, enabling potential privilege escalation or service disruption across the cluster federation.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"known_not_affected": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-66788"
},
{
"category": "external",
"summary": "RHBZ#2507533",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2507533"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-66788",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-66788"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-66788",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-66788"
}
],
"release_date": "2026-08-20T17:20:00+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-03T04:36:21+00:00",
"details": "For release note details, see the upstream Submariner release notes:\n\nhttps://submariner.io/community/releases/\n\nDownstream-specific issues resolved:\n* ACM-30182\n* ACM-32385\n* ACM-34578\n* ACM-34651\n* ACM-34693\n* ACM-36281\n* ACM-36898\n* ACM-36899\n* ACM-36907\n* ACM-36909\n* ACM-36910\n* ACM-36911\n* ACM-36912\n* ACM-36927\n* ACM-38289\n* ACM-38295\n* ACM-38315\n* ACM-38320\n* ACM-38322\n* ACM-38330\n* ACM-38357\n* ACM-38360\n* ACM-38447\n* ACM-38448\n* ACM-38449\n* ACM-38450\n* ACM-38451\n* ACM-38452\n* ACM-38453\n* ACM-38466\n* ACM-38494\n* ACM-38495\n* ACM-38496\n* ACM-38497\n* ACM-38499\n* ACM-38500\n* ACM-38513\n* ACM-38515\n* ACM-38519\n* ACM-38520\n* ACM-38533\n* ACM-38538\n* ACM-38542\n* ACM-38546\n* ACM-39374\n* ACM-39382\n* ACM-39384\n* ACM-39385\n* ACM-39510\n* ACM-39511\n* ACM-39568\n* ACM-40464\n* ACM-41039\n* ACM-42640\n\nFor more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation:\n\nhttps://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.17/",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:63016"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 3.7,
"baseSeverity": "LOW",
"confidentialityImpact": "NONE",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:329806e6d9cee8c20823f45a67c1b0cdb4a8af957c520ef8303557576e8a32f0_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:5ae6ea9d9cdeab414a4010e580455a2eb7d1dc23e62d27d1629f531d10930e8d_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:6ad357fc6bd252aad971852abf04c809245e8774b0af10b32f9f01393d7abebf_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-agent-rhel9@sha256:ecce053c0601c91638c2f9aea23289e685194839886b5d1701ccbf602d20ce75_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:321dc468744626a9542c344381f9db454d7cbc7a69e3a925365ce1d8ae8ca474_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:4b0e567a6b91e16899ad070e6ebe366885e5c2f333ed5f55cfa7e2bd8fc98565_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:7977035d3755e95121062d90a386a6b23af5d394dacb7c5e622098d70285e1d3_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/lighthouse-coredns-rhel9@sha256:d58913107527d89b998ea945f7aa164ee8ca67de994965e7aa08dc659f4dd818_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:1ff333877495876e1724cb0cbed2b896c7792ff0ce4a15365b2e627d932f77f9_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:341200ef2b4f45418f388138aa76fad3608b138e24ade1277b14805bf1a718bd_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:cdcf36cf6655129561a938b9ebd5104e86bb1ab1cb5afc27acf021b431597d9e_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/nettest-rhel9@sha256:d4e3a9606ae6f2cdf2deff18ae688a485560e782b664286d95795ccfb2b73204_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:1b38ba10de27535bc6e76dac4db2e66b95e7c666f20136c15d7ac11531c541df_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:a8f500a30142993b8d07f4ed5b29007d89c6edc09ece1bbd72b4467e1a504c6b_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:d5ff003a3893554a20712a9aebda49be7a6e83594ecc5fd8bb898567734c86b8_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/subctl-rhel9@sha256:fb5fdb72a0f7d4b8555359d506eebd63d10713a2fd24b5a3669554155f620c62_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7045277055dbf89b028bab81aaddf2b9793e3f55aa6f611d92c6619c97d0b91f_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:73e5857eceadffb8ac80ef9e67720dd13f56ddbc08d6438b936eb3b1f3cfc08b_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:7960fe35f5506118d31813c2d263aa8212f32b719b6053fa52c5fe6447b6464c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-gateway-rhel9@sha256:bdd03a5cb677b0fa583f223dd9602b53a3d186720ad641e46bde67b2abd69cdc_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:38f793d2ffc56c1728eecff1b427435c4580c1edfee32fe747a35cd5951e385c_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:933c7641c879446b0c0f145d1a1ac6bda43d397cd3aac9e72195228d6ba6198e_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:9cd8f3b7ae72986e653970d8f8a40626fa847e719e36e99fb5c25e1571255b68_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-globalnet-rhel9@sha256:f2478a2954975e8972458ccd2ae48d81fd1ab4cf393ab427eca0c91c3d0833f1_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-operator-bundle@sha256:a8bb318b8afa37daf2ce9394d80c46224e872b593934fbb68fd89e20e6665f84_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:0714135f3594b0e42c4d185779b3a716fc98c6bc35135aa6dec2c9730c93ae52_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:1c0fe9629265844d3cd36fa6fd358026087240dee118e1d438f3ac273f427054_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:5d1225146756be65df394eeb2ec2afa87b025b6e5bfbc9ddd89eaff47d5a40d8_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-rhel9-operator@sha256:93850d48fc8efac7bc3630e4102f5471bcf84921a31c17bc1512e77a4602fc36_arm64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:2fb77f64012b0025fe9bb9b31525267556ffb28011749934d23c70070cadf6ea_ppc64le",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:96132035085915456375c22dc16257074197c7f3ad198f1476f1445c9969f3a5_s390x",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:cd0b7176e4df72c90e044abd5e63598c590a5001d5bfc988cb0cf42b22e08c1d_amd64",
"Red Hat Advanced Cluster Management for Kubernetes 2.17:registry.redhat.io/rhacm2/submariner-route-agent-rhel9@sha256:ce038f66b66600aba82aaa978e8c50cd5b319e6599e50426d4476da9124cd92f_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "lighthouse: Dockerfile build stages use end-of-life Fedora 40 referenced by mutable tag"
}
]
}
RHSA-2026:66022
Vulnerability from csaf_redhat - Published: 2026-09-09 14:59 - Updated: 2026-09-15 06:18Summary
Red Hat Security Advisory: Red Hat OpenShift API for Data Protection
Severity
Important
Notes
Topic: A new version of OpenShift API for Data Protection (OADP) is now available.
Details: OpenShift API for Data Protection (OADP) enables you to back up and restore
application resources, persistent volume data, and internal container
images to external backup storage. OADP enables both file system-based and
snapshot-based backups for persistent volumes.
Terms of Use: This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.
A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.
8.1 (High)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.
8.8 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection's read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.
8.1 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.
5.5 (Medium)
Affected products
Fixed
24 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
25 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.
7.5 (High)
Affected products
Fixed
20 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
29 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Threats
Impact
Important
A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user's web browser, potentially compromising user data or taking control of their session.
6.1 (Medium)
Affected products
Fixed
16 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
33 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Moderate
A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.
7.4 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Threats
Impact
Important
A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.
7.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.
7.5 (High)
Affected products
Fixed
8 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
41 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.
8.2 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Threats
Impact
Important
A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash ('/'), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user's browser, potentially compromising user data or actions.
8.1 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
Threats
Impact
Important
A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory ('..') segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.
7.5 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in Magistrala's Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.
8.8 (High)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Vendor Fix
fix
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Vendor Fix
fix
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — | ||
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Threats
Impact
Important
A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.
6.5 (Medium)
Affected products
Fixed
4 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 | — |
Vendor Fix
fix
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x | — |
Vendor Fix
fix
Workaround
|
Known not affected
45 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 | — |
Workaround
|
|
| Unresolved product id: OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 | — |
Workaround
|
Threats
Impact
Moderate
References
267 references
{
"document": {
"aggregate_severity": {
"namespace": "https://access.redhat.com/security/updates/classification/",
"text": "Important"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright \u00a9 Red Hat, Inc. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "A new version of OpenShift API for Data Protection (OADP) is now available.",
"title": "Topic"
},
{
"category": "general",
"text": "OpenShift API for Data Protection (OADP) enables you to back up and restore\napplication resources, persistent volume data, and internal container\nimages to external backup storage. OADP enables both file system-based and\nsnapshot-based backups for persistent volumes.",
"title": "Details"
},
{
"category": "legal_disclaimer",
"text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.",
"title": "Terms of Use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://access.redhat.com/security/team/contact/",
"issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.",
"name": "Red Hat Product Security",
"namespace": "https://www.redhat.com"
},
"references": [
{
"category": "self",
"summary": "https://access.redhat.com/errata/RHSA-2026:66022",
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-15792",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-25681",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27136",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-27145",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-32283",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33811",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-33818",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39820",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39821",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39828",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39829",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39830",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39831",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39833",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-39835",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-41178",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42499",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42502",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42504",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-42508",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-44740",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46595",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-46597",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53488",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-53492",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56852",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56853",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56858",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56859",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56860",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-56862",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-71235",
"url": "https://access.redhat.com/security/cve/CVE-2026-71235"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/cve/CVE-2026-75593",
"url": "https://access.redhat.com/security/cve/CVE-2026-75593"
},
{
"category": "external",
"summary": "https://access.redhat.com/security/updates/classification/",
"url": "https://access.redhat.com/security/updates/classification/"
},
{
"category": "external",
"summary": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore",
"url": "https://docs.redhat.com/en/documentation/openshift_container_platform/latest/html/backup_and_restore/oadp-application-backup-and-restore"
},
{
"category": "self",
"summary": "Canonical URL",
"url": "https://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_66022.json"
}
],
"title": "Red Hat Security Advisory: Red Hat OpenShift API for Data Protection",
"tracking": {
"current_release_date": "2026-09-15T06:18:13+00:00",
"generator": {
"date": "2026-09-15T06:18:13+00:00",
"engine": {
"name": "Red Hat SDEngine",
"version": "5.3.21"
}
},
"id": "RHSA-2026:66022",
"initial_release_date": "2026-09-09T14:59:15+00:00",
"revision_history": [
{
"date": "2026-09-09T14:59:15+00:00",
"number": "1",
"summary": "Initial version"
},
{
"date": "2026-09-09T14:59:41+00:00",
"number": "2",
"summary": "Last updated version"
},
{
"date": "2026-09-15T06:18:13+00:00",
"number": "3",
"summary": "Last generated version"
}
],
"status": "final",
"version": "3"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "OpenShift API for Data Protection 1.5",
"product": {
"name": "OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5",
"product_identification_helper": {
"cpe": "cpe:/a:redhat:openshift_api_data_protection:1.5::el9"
}
}
}
],
"category": "product_family",
"name": "OpenShift API for Data Protection"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Ae495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Ab7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Af84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-operator-bundle@sha256%3Ae4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-operator-bundle\u0026tag=1788902327"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Ab503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01?arch=amd64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
}
}
}
],
"category": "architecture",
"name": "amd64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3A86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3A1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Af1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3Aae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3Ad926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Aba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3Adcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Ad3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60?arch=arm64\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
}
}
}
],
"category": "architecture",
"name": "arm64"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Abfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Aadc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3A2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3Aba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3A05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3Ad90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3Aaa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90?arch=ppc64le\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
}
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"product_id": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-cli-binaries-rhel9@sha256%3Ac9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-cli-binaries-rhel9\u0026tag=1788860076"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"product_id": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-hypershift-velero-plugin-rhel9@sha256%3Af3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9\u0026tag=1788859288"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"product_id": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-kubevirt-velero-plugin-rhel9@sha256%3A0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9\u0026tag=1788901553"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"product_id": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-mustgather-rhel9@sha256%3Ac2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-mustgather-rhel9\u0026tag=1788859896"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"product_id": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-non-admin-rhel9@sha256%3A919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-non-admin-rhel9\u0026tag=1788863730"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"product_id": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-rhel9-operator@sha256%3Ad93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-rhel9-operator\u0026tag=1788901633"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-rhel9@sha256%3A3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-rhel9\u0026tag=1788860461"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-rhel9@sha256%3A6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-rhel9\u0026tag=1788859276"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-aws-rhel9@sha256%3A50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9\u0026tag=1788859285"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-gcp-rhel9@sha256%3A7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9\u0026tag=1788859287"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-legacy-aws-rhel9@sha256%3A38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9\u0026tag=1788859282"
}
}
},
{
"category": "product_version",
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"product": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"product_id": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"product_identification_helper": {
"purl": "pkg:oci/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256%3A51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2?arch=s390x\u0026repository_url=registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9\u0026tag=1788859710"
}
}
}
],
"category": "architecture",
"name": "s390x"
}
],
"category": "vendor",
"name": "Red Hat"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64 as a component of OpenShift API for Data Protection 1.5",
"product_id": "OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
},
"product_reference": "registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64",
"relates_to_product_reference": "OpenShift API for Data Protection 1.5"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-15792",
"cwe": {
"id": "CWE-617",
"name": "Reachable Assertion"
},
"discovery_date": "2026-07-21T17:01:51.555730+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2503746"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit. A malicious BuildKit client or frontend can craft a specially designed request, leading to the BuildKit daemon crashing. This vulnerability results in a denial of service (DoS), making the BuildKit service unavailable.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "BuildKit is used by several Red Hat products to build container images. This issue allows a malicious BuildKit frontend or client to cause the BuildKit build process to crash. Exploiting this issue requires the ability to supply a build definition (for example, a Dockerfile specifying a custom #syntax frontend) to a BuildKit-based build; it does not allow remote code execution or exposure of data. The issue is fixed upstream in BuildKit version 0.31.2. Red Hat Hardened Images (Buildah, Podman, and Trivy) has already shipped the fixed version. Other affected Red Hat products are being assessed and will ship the fixed version of BuildKit in upcoming releases.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-15792"
},
{
"category": "external",
"summary": "RHBZ#2503746",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2503746"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-15792",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-15792"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-15792"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-qx3x-mv6r-52p6"
}
],
"release_date": "2026-07-21T16:10:21.395000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Avoid building container images using BuildKit frontends from untrusted sources. A BuildKit frontend is typically specified using a \"# syntax\" directive at the top of a Dockerfile, or with the \"--frontend\" option to the \"buildctl build\" command. Only use frontend images that come from a trusted source.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: Denial of Service via malicious client request"
},
{
"cve": "CVE-2026-25681",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:08.177603+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480761"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. A remote attacker could exploit this vulnerability by providing specially crafted HTML. When this arbitrary HTML is parsed and rendered, it can result in an unexpected HTML tree, bypassing input sanitization. This can be leveraged to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution in applications that use the affected component.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important vulnerability in `golang.org/x/net/html` could enable remote attackers to execute Cross-Site Scripting (XSS) attacks, potentially leading to arbitrary code execution. The flaw allows specially crafted HTML to bypass input sanitization during parsing and rendering. Red Hat products are affected if they process untrusted HTML content using the vulnerable component without additional output encoding or robust content security policies.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-25681"
},
{
"category": "external",
"summary": "RHBZ#2480761",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480761"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-25681",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-25681"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-25681"
},
{
"category": "external",
"summary": "https://go.dev/cl/781703",
"url": "https://go.dev/cl/781703"
},
{
"category": "external",
"summary": "https://go.dev/issue/79574",
"url": "https://go.dev/issue/79574"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5029",
"url": "https://pkg.go.dev/vuln/GO-2026-5029"
}
],
"release_date": "2026-05-22T15:01:21.975000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "To mitigate this flaw, applications processing untrusted HTML input must implement strict input sanitization and ensure all output is properly encoded before rendering. Deploying a comprehensive Content Security Policy (CSP) can restrict script execution, further reducing the attack surface. Administrators should review application configurations to ensure adequate protection against XSS.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang.org/x/net/html: Arbitrary code execution via Cross-Site Scripting"
},
{
"cve": "CVE-2026-27136",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:00:56.609820+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480757"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. When arbitrary HTML is parsed and then rendered, it can result in an unexpected HTML tree. This allows an attacker to bypass HTML sanitization mechanisms, leading to Cross-Site Scripting (XSS) attacks in applications. Such attacks can result in information disclosure or arbitrary code execution.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in `golang.org/x/net/html` is rated as Important. It allows for Cross-Site Scripting (XSS) attacks by enabling an attacker to bypass HTML sanitization mechanisms when arbitrary HTML is parsed and rendered. This can lead to information disclosure or arbitrary code execution in affected applications. Exploitation typically requires user interaction, where a user processes specially crafted malicious HTML content.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27136"
},
{
"category": "external",
"summary": "RHBZ#2480757",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480757"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27136",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27136"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27136"
},
{
"category": "external",
"summary": "https://go.dev/cl/781685",
"url": "https://go.dev/cl/781685"
},
{
"category": "external",
"summary": "https://go.dev/issue/79575",
"url": "https://go.dev/issue/79575"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5030",
"url": "https://pkg.go.dev/vuln/GO-2026-5030"
}
],
"release_date": "2026-05-22T15:01:22.111000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via HTML parsing bypass"
},
{
"cve": "CVE-2026-27145",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-02T23:01:08.992540+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484207"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/x509` package of `golang`. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by presenting a specially crafted X.509 certificate with a large number of DNS Subject Alternative Name (SAN) entries. The certificate verification process, specifically the `VerifyHostname` function, incurs excessive computational overhead due to repeated string operations when processing these entries. This can lead to a significant performance degradation or unresponsiveness of systems validating such certificates.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "RHBZ#2484207",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484207"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-27145",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-27145"
},
{
"category": "external",
"summary": "https://go.dev/cl/783621",
"url": "https://go.dev/cl/783621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79694",
"url": "https://go.dev/issue/79694"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5037",
"url": "https://pkg.go.dev/vuln/GO-2026-5037"
}
],
"release_date": "2026-06-02T22:01:36.954000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "A flaw was found in the Go standard library crypto/x509 package. When verifying a TLS certificate hostname, VerifyHostname processed each DNS Subject Alternative Name (SAN) entry in a loop and repeatedly split the candidate hostname on \".\" characters. For certificates with a very large DNS SAN list, CPU use could grow quadratically with the number of SAN entries and hostname labels. Because hostname verification runs before the certificate chain is built, this overhead can occur even when the certificate is not trusted.\n\nRed Hat rates this issue as Important. It affects Red Hat products that include the Go standard library crypto/x509 code from an affected Go toolchain version (before Go 1.25.11, or from Go 1.26.0 through Go 1.26.3). Applications and container images built with a fixed Go release (1.25.11 or later, or 1.26.4 or later) are not affected. Community distributions such as Fedora are also affected.\n\nUpstream fix: Go 1.25.11 and Go 1.26.4 (GO-2026-5037).",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/x509: golang: golang crypto/x509: Denial of Service via excessive processing of DNS SAN entries"
},
{
"cve": "CVE-2026-32283",
"cwe": {
"id": "CWE-764",
"name": "Multiple Locks of a Critical Resource"
},
"discovery_date": "2026-04-08T02:01:16.213799+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2456338"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package within the Go (golang) standard library, specifically affecting TLS 1.3 connections. A remote attacker can exploit this vulnerability by sending multiple key update messages in a single record after the handshake. This can cause the connection to deadlock, leading to uncontrolled consumption of resources and ultimately a denial of service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in the Go `crypto/tls` package allows a remote attacker to cause a denial of service in applications using TLS 1.3. By sending multiple key update messages in a single record post-handshake, an attacker can trigger a connection deadlock, leading to uncontrolled resource consumption. This impacts Red Hat products utilizing the affected Go standard library for TLS 1.3 connections.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-32283"
},
{
"category": "external",
"summary": "RHBZ#2456338",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2456338"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-32283",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-32283"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-32283"
},
{
"category": "external",
"summary": "https://go.dev/cl/763767",
"url": "https://go.dev/cl/763767"
},
{
"category": "external",
"summary": "https://go.dev/issue/78334",
"url": "https://go.dev/issue/78334"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU",
"url": "https://groups.google.com/g/golang-announce/c/0uYbvbPZRWU"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4870",
"url": "https://pkg.go.dev/vuln/GO-2026-4870"
}
],
"release_date": "2026-04-08T01:06:57.670000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Go crypto/tls: Denial of Service via multiple TLS 1.3 key update messages"
},
{
"cve": "CVE-2026-33811",
"cwe": {
"id": "CWE-1341",
"name": "Multiple Releases of Same Resource or Handle"
},
"discovery_date": "2026-05-07T20:01:34.913869+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467822"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net` package of Go (golang), specifically when using the `LookupCNAME` function with the `cgo` DNS resolver. A remote attacker could exploit this by providing a very long Canonical Name (CNAME) response. This can trigger a double-free of C memory, leading to a crash and a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net` package, affecting applications configured to use the `cgo` DNS resolver. A remote attacker could trigger a double-free memory error by providing a very long CNAME response, leading to a crash of the vulnerable application and impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33811"
},
{
"category": "external",
"summary": "RHBZ#2467822",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467822"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33811",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33811"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33811"
},
{
"category": "external",
"summary": "https://go.dev/cl/767860",
"url": "https://go.dev/cl/767860"
},
{
"category": "external",
"summary": "https://go.dev/issue/78803",
"url": "https://go.dev/issue/78803"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4981",
"url": "https://pkg.go.dev/vuln/GO-2026-4981"
}
],
"release_date": "2026-05-07T19:41:19.285000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "To mitigate this issue, applications can be configured to use the pure Go DNS resolver instead of the `cgo` DNS resolver. This can be achieved by setting the `GODEBUG` environment variable to `netdns=go`. For example, to run a Go application with this mitigation: `GODEBUG=netdns=go /path/to/your/go/application`. This change may require restarting affected applications or services to take effect. Users should verify that this change does not negatively impact DNS resolution for their specific application environment.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net: golang: Go net package: Denial of Service via long CNAME response in LookupCNAME"
},
{
"cve": "CVE-2026-33818",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:12:37.151735+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/asn1` package in Go. An attacker could provide a specially crafted, deeply-nested Abstract Syntax Notation One (ASN.1) structure, leading to excessive recursion during the `Unmarshal` operation. This could result in stack exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go encoding/asn1 package, as it can be triggered remotely without authentication. An attacker can provide a malformed ASN.1 structure, causing excessive recursion during unmarshalling and leading to stack exhaustion, which can render the service unavailable.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-33818"
},
{
"category": "external",
"summary": "RHBZ#2515815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-33818",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-33818"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33818"
},
{
"category": "external",
"summary": "https://go.dev/cl/814980",
"url": "https://go.dev/cl/814980"
},
{
"category": "external",
"summary": "https://go.dev/issue/80405",
"url": "https://go.dev/issue/80405"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5972",
"url": "https://pkg.go.dev/vuln/GO-2026-5972"
}
],
"release_date": "2026-08-13T21:58:52.821000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/asn1: golang: Go encoding/asn1: Denial of Service via excessive recursion in Unmarshal"
},
{
"cve": "CVE-2026-39820",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-05-07T20:01:27.800929+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package of the Go programming language. An attacker could provide specially crafted inputs to the `ParseAddress`, `ParseAddressList`, or `ParseDate` functions. This could lead to excessive consumption of CPU and memory resources, resulting in a Denial of Service (DoS) for applications processing these inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the Go `net/mail` package. Applications processing untrusted email inputs via `ParseAddress`, `ParseAddressList`, or `ParseDate` functions are susceptible to excessive resource consumption, which can lead to service unavailability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39820"
},
{
"category": "external",
"summary": "RHBZ#2467820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39820",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39820"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39820"
},
{
"category": "external",
"summary": "https://go.dev/cl/759940",
"url": "https://go.dev/cl/759940"
},
{
"category": "external",
"summary": "https://go.dev/issue/78566",
"url": "https://go.dev/issue/78566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4986",
"url": "https://pkg.go.dev/vuln/GO-2026-4986"
}
],
"release_date": "2026-05-07T19:41:19.854000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: Go net/mail: Denial of Service via crafted email inputs"
},
{
"cve": "CVE-2026-39821",
"cwe": {
"id": "CWE-1289",
"name": "Improper Validation of Unsafe Equivalence in Input"
},
"discovery_date": "2026-05-22T16:00:52.844126+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480756"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/idna. ToASCII and ToUnicode incorrectly accept Punycode-encoded labels that decode to an ASCII-only hostname (for example, xn--example-.com returns example.com instead of an error). Applications that validate the ASCII form then convert to Unicode may grant access to a restricted hostname the ASCII check would have rejected.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/net/idna is vulnerable to privilege escalation through incorrect Punycode label handling in ToASCII and ToUnicode. An attacker who can supply a Punycode hostname that passes an ASCII-only authorization check may have it normalized to a restricted ASCII name the application intended to block. Red Hat exposure is broad across products shipping the Go toolchain or bundling golang.org/x/net, including RHEL and RHEL-AI golang RPMs, hummingbird Go runtimes, OpenShift and ODF container builds, and Ceph/OpenShift components compiled against affected x/net versions.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39821"
},
{
"category": "external",
"summary": "RHBZ#2480756",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480756"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39821",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39821"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39821"
},
{
"category": "external",
"summary": "https://go.dev/cl/767220",
"url": "https://go.dev/cl/767220"
},
{
"category": "external",
"summary": "https://go.dev/issue/78760",
"url": "https://go.dev/issue/78760"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5026",
"url": "https://pkg.go.dev/vuln/GO-2026-5026"
}
],
"release_date": "2026-05-22T15:01:21.462000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Upgrade to a fixed golang.org/x/net release that includes the idna correction, via updated golang or dependent package rebuilds.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/net/idna: golang: net/http: golang.org/x/net/idna: Privilege escalation via incorrect Punycode label processing"
},
{
"cve": "CVE-2026-39828",
"cwe": {
"id": "CWE-281",
"name": "Improper Preservation of Permissions"
},
"discovery_date": "2026-05-22T04:01:46.775641+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480687"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could exploit this vulnerability when an SSH server authentication callback returned a PartialSuccessError with non-nil permissions. This flaw caused these permissions to be silently discarded, potentially bypassing certificate restrictions, such as a force-command, after a second authentication factor succeeded. This could lead to unauthorized command execution or access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important security flaw in the `golang.org/x/crypto/ssh` library. When an SSH server utilizing this library is configured with specific authentication callbacks that return a `PartialSuccessError` with non-nil permissions, an attacker could bypass intended certificate restrictions, such as `force-command`. This bypass could lead to unauthorized command execution or access on affected Red Hat systems configured with multi-factor authentication and certificate-based access controls.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39828"
},
{
"category": "external",
"summary": "RHBZ#2480687",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480687"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39828",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39828"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39828"
},
{
"category": "external",
"summary": "https://go.dev/cl/781621",
"url": "https://go.dev/cl/781621"
},
{
"category": "external",
"summary": "https://go.dev/issue/79562",
"url": "https://go.dev/issue/79562"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5014",
"url": "https://pkg.go.dev/vuln/GO-2026-5014"
}
],
"release_date": "2026-05-22T02:31:26.883000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Unauthorized command execution via discarded SSH permissions"
},
{
"cve": "CVE-2026-39829",
"cwe": {
"id": "CWE-1284",
"name": "Improper Validation of Specified Quantity in Input"
},
"discovery_date": "2026-05-22T04:01:30.092249+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480681"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The RSA and DSA public key parsers in the affected component did not enforce size limits on key parameters. This vulnerability allows an unauthenticated client to provide a crafted public key with an excessively large modulus or DSA parameter during public key authentication. Successful exploitation could lead to a denial of service (DoS) due to prolonged CPU consumption during signature verification.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This vulnerability in golang.org/x/crypto/ssh is rated as Important. An unauthenticated remote attacker could trigger a denial of service by providing a specially crafted public key with excessively large parameters during SSH public key authentication. This could lead to prolonged CPU consumption on the server, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39829"
},
{
"category": "external",
"summary": "RHBZ#2480681",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480681"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39829",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39829"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39829"
},
{
"category": "external",
"summary": "https://go.dev/cl/781641",
"url": "https://go.dev/cl/781641"
},
{
"category": "external",
"summary": "https://go.dev/cl/781661",
"url": "https://go.dev/cl/781661"
},
{
"category": "external",
"summary": "https://go.dev/issue/79565",
"url": "https://go.dev/issue/79565"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5018",
"url": "https://pkg.go.dev/vuln/GO-2026-5018"
}
],
"release_date": "2026-05-22T02:31:27.324000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted public key with excessive parameters"
},
{
"cve": "CVE-2026-39830",
"cwe": {
"id": "CWE-772",
"name": "Missing Release of Resource after Effective Lifetime"
},
"discovery_date": "2026-05-22T04:01:38.517202+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480684"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote malicious SSH peer can exploit this by sending unsolicited global request responses, which fills an internal buffer and blocks the connection\u0027s read loop. This prevents the associated resources from being released, leading to a resource leak per connection. The consequence is a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh`. A remote, unauthenticated attacker can exploit this vulnerability by sending unsolicited global request responses to an affected SSH server, leading to resource exhaustion and a denial of service. The impact is considered Important due to the potential for unauthenticated remote disruption of services utilizing the vulnerable SSH library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39830"
},
{
"category": "external",
"summary": "RHBZ#2480684",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480684"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39830",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39830"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39830"
},
{
"category": "external",
"summary": "https://go.dev/cl/781640",
"url": "https://go.dev/cl/781640"
},
{
"category": "external",
"summary": "https://go.dev/cl/781664",
"url": "https://go.dev/cl/781664"
},
{
"category": "external",
"summary": "https://go.dev/issue/79564",
"url": "https://go.dev/issue/79564"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5017",
"url": "https://pkg.go.dev/vuln/GO-2026-5017"
}
],
"release_date": "2026-05-22T02:31:27.208000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "To mitigate this denial of service vulnerability, restrict network access to any service that utilizes the `golang.org/x/crypto/ssh` library and is exposed to untrusted networks. Implement firewall rules to allow connections only from trusted hosts or networks. This action limits the ability of malicious peers to send unsolicited global request responses. A restart of the affected service may be necessary for the new network rules to be applied effectively.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via resource leak from unsolicited SSH responses"
},
{
"cve": "CVE-2026-39831",
"cwe": {
"id": "CWE-347",
"name": "Improper Verification of Cryptographic Signature"
},
"discovery_date": "2026-05-22T04:01:12.861178+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480675"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. The Verify() method, responsible for FIDO/U2F security key types, did not properly check for user presence. This allowed signatures to be accepted without requiring a physical touch on the hardware security key. As a result, an attacker could potentially use a hardware security key in an unattended manner, bypassing a critical security control designed to ensure user intent.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39831"
},
{
"category": "external",
"summary": "RHBZ#2480675",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480675"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39831",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39831"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39831"
},
{
"category": "external",
"summary": "https://go.dev/cl/781662",
"url": "https://go.dev/cl/781662"
},
{
"category": "external",
"summary": "https://go.dev/issue/79566",
"url": "https://go.dev/issue/79566"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5019",
"url": "https://pkg.go.dev/vuln/GO-2026-5019"
}
],
"release_date": "2026-05-22T02:31:27.436000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Security key bypass due to missing user presence check"
},
{
"cve": "CVE-2026-39833",
"cwe": {
"id": "CWE-358",
"name": "Improperly Implemented Security Check for Standard"
},
"discovery_date": "2026-05-22T04:01:35.714593+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480683"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/agent. The NewKeyring() function, which creates an in-memory keyring, failed to enforce the ConfirmBeforeUse constraint on keys. This allowed keys configured to require user confirmation before use to perform signing operations without any prompt or indication to the user. Consequently, an attacker could potentially bypass intended security controls, leading to unauthorized cryptographic signing actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Red Hat rates this issue as Moderate with RH CVSS 5.5 (CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N). A flaw was found in golang.org/x/crypto/ssh/agent where the in-memory keyring returned by NewKeyring() silently accepted SSH agent keys with the ConfirmBeforeUse constraint but did not enforce interactive confirmation before signing. Exploitation requires local access and low privileges on a system where an affected application uses NewKeyring() with ConfirmBeforeUse. Most Red Hat products that bundle golang.org/x/crypto do not use the ssh/agent ConfirmBeforeUse feature in their supported execution paths. The upstream CISA CVSS 9.1 assumes a broader network attack context that does not reflect Red Hat product deployment.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39833"
},
{
"category": "external",
"summary": "RHBZ#2480683",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480683"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39833",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39833"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39833"
},
{
"category": "external",
"summary": "https://go.dev/cl/778640",
"url": "https://go.dev/cl/778640"
},
{
"category": "external",
"summary": "https://go.dev/cl/778641",
"url": "https://go.dev/cl/778641"
},
{
"category": "external",
"summary": "https://go.dev/issue/79436",
"url": "https://go.dev/issue/79436"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5005",
"url": "https://pkg.go.dev/vuln/GO-2026-5005"
}
],
"release_date": "2026-05-22T02:31:26.294000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Update affected Go applications to use golang.org/x/crypto version 0.52.0 or later, which rejects unsupported ConfirmBeforeUse keys instead of silently ignoring the constraint. As a workaround, do not add keys with ConfirmBeforeUse to the in-memory keyring from golang.org/x/crypto/ssh/agent, or use an SSH agent implementation that correctly enforces confirm-before-use.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: Security bypass due to unenforced key confirmation"
},
{
"cve": "CVE-2026-39835",
"cwe": {
"id": "CWE-476",
"name": "NULL Pointer Dereference"
},
"discovery_date": "2026-05-22T04:01:27.279943+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480680"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. SSH servers configured to use CertChecker as a public key callback, without explicitly setting IsUserAuthority or IsHostAuthority, are vulnerable. A remote attacker can exploit this by presenting a specially crafted certificate, causing the server to panic and resulting in a Denial of Service (DoS).",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in `golang.org/x/crypto/ssh` affecting SSH servers that utilize `CertChecker` as a public key callback without explicitly configuring `IsUserAuthority` or `IsHostAuthority`. A remote, unauthenticated attacker can trigger a server panic by presenting a specially crafted certificate, leading to service disruption. Exploitation requires a specific, non-default configuration of the `CertChecker`.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-39835"
},
{
"category": "external",
"summary": "RHBZ#2480680",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480680"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-39835",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-39835"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-39835"
},
{
"category": "external",
"summary": "https://go.dev/cl/781660",
"url": "https://go.dev/cl/781660"
},
{
"category": "external",
"summary": "https://go.dev/issue/79563",
"url": "https://go.dev/issue/79563"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5015",
"url": "https://pkg.go.dev/vuln/GO-2026-5015"
}
],
"release_date": "2026-05-22T02:31:26.982000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang: golang.org/x/crypto/ssh: Denial of Service via crafted SSH certificate"
},
{
"cve": "CVE-2026-41178",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-06-04T16:01:10.300537+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484830"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in OpenTelemetry-Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by sending oversized or invalid baggage headers. The `Parse` function, in affected versions, failed to reject raw-length inputs, leading to excessive processing and error logging when handling these large inputs.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in OpenTelemetry-Go, affecting versions 1.41.0 and 1.43.0. An attacker can exploit this flaw by sending oversized baggage headers, causing the `Parse` function to process invalid inputs and log errors, which can lead to resource exhaustion and service disruption in Red Hat products utilizing these affected OpenTelemetry-Go versions. The impact is considered Important due to the potential for remote, unauthenticated denial of service.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-41178"
},
{
"category": "external",
"summary": "RHBZ#2484830",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484830"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-41178",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-41178"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-41178"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/pull/7880",
"url": "https://github.com/open-telemetry/opentelemetry-go/pull/7880"
},
{
"category": "external",
"summary": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835",
"url": "https://github.com/open-telemetry/opentelemetry-go/security/advisories/GHSA-5wrp-cwcj-q835"
}
],
"release_date": "2026-06-04T14:38:23.707000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/open-telemetry/opentelemetry-go: go.opentelemetry.io/otel/baggage: go.opentelemetry.io/otel/propagation: OpenTelemetry-Go: Denial of Service via oversized baggage headers"
},
{
"cve": "CVE-2026-42499",
"cwe": {
"id": "CWE-1046",
"name": "Creation of Immutable Text Using String Concatenation"
},
"discovery_date": "2026-05-07T20:00:51.685602+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2467809"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/mail` package within the Go standard library. A remote attacker could provide specially crafted, pathological email addresses. When these malformed email addresses are parsed by the `consumePhrase` function, it can lead to excessive resource consumption due to quadratic string concatenation, resulting in a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `net/mail` package of the Go standard library. A remote attacker can exploit this flaw by sending specially crafted email addresses, leading to excessive resource consumption and a denial of service in Go applications that parse email addresses using the affected library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42499"
},
{
"category": "external",
"summary": "RHBZ#2467809",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2467809"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42499",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42499"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42499"
},
{
"category": "external",
"summary": "https://go.dev/cl/771520",
"url": "https://go.dev/cl/771520"
},
{
"category": "external",
"summary": "https://go.dev/issue/78987",
"url": "https://go.dev/issue/78987"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M",
"url": "https://groups.google.com/g/golang-announce/c/qcCIEXso47M"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-4977",
"url": "https://pkg.go.dev/vuln/GO-2026-4977"
}
],
"release_date": "2026-05-07T19:41:18.615000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/mail: golang: net/mail: Denial of Service via pathological email address parsing"
},
{
"cve": "CVE-2026-42502",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-05-22T16:01:11.151484+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480762"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/net/html. This vulnerability allows an attacker to manipulate how HTML is processed and displayed. By providing specially crafted HTML, an attacker can cause an unexpected structure in the rendered output. This can lead to Cross-Site Scripting (XSS) attacks, where malicious scripts are executed in a user\u0027s web browser, potentially compromising user data or taking control of their session.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in golang.org/x/net/html can lead to Cross-Site Scripting (XSS) in applications that parse and render untrusted HTML, even with sanitization attempts. This is due to an unexpected HTML tree structure, allowing malicious scripts to execute in a user\u0027s browser.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42502"
},
{
"category": "external",
"summary": "RHBZ#2480762",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480762"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42502",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42502"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42502"
},
{
"category": "external",
"summary": "https://go.dev/cl/781701",
"url": "https://go.dev/cl/781701"
},
{
"category": "external",
"summary": "https://go.dev/issue/79572",
"url": "https://go.dev/issue/79572"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8",
"url": "https://groups.google.com/g/golang-announce/c/iI-mYSI0lu8"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5027",
"url": "https://pkg.go.dev/vuln/GO-2026-5027"
}
],
"release_date": "2026-05-22T15:01:21.649000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Applications utilizing `golang.org/x/net/html` should implement robust sanitization of all untrusted HTML input before rendering to prevent the creation of unexpected HTML structures that could facilitate XSS attacks. If an application does not require rendering arbitrary HTML, it should avoid processing such input.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.1,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "LOW",
"integrityImpact": "LOW",
"privilegesRequired": "NONE",
"scope": "CHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "golang.org/x/net/html: golang: golang.org/x/net/html: Cross-Site Scripting via unexpected HTML tree rendering"
},
{
"cve": "CVE-2026-42504",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-06-02T23:01:00.320527+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2484204"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the Golang MIME (Multipurpose Internet Mail Extensions) package. A remote attacker could exploit this vulnerability by sending a maliciously-crafted MIME header containing many invalid encoded-words. This could lead to excessive CPU consumption, resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity flaw. A remote attacker could trigger a Denial of Service by sending a crafted MIME header with numerous invalid encoded-words to an application utilizing the affected Golang MIME package. This could lead to excessive CPU consumption on the system processing the malformed header, impacting service availability.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "RHBZ#2484204",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2484204"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42504",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42504"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42504"
},
{
"category": "external",
"summary": "https://go.dev/cl/774481",
"url": "https://go.dev/cl/774481"
},
{
"category": "external",
"summary": "https://go.dev/issue/79217",
"url": "https://go.dev/issue/79217"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5038",
"url": "https://pkg.go.dev/vuln/GO-2026-5038"
}
],
"release_date": "2026-06-02T22:01:37.219000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "To mitigate this issue, restrict network access to services that process MIME headers from untrusted sources. Implement input validation and sanitization for all incoming data, especially MIME headers, to prevent maliciously crafted content from being processed by applications utilizing the vulnerable Golang MIME package.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "mime: golang: Golang MIME: Denial of Service via maliciously-crafted MIME header"
},
{
"cve": "CVE-2026-42508",
"cwe": {
"id": "CWE-295",
"name": "Improper Certificate Validation"
},
"discovery_date": "2026-05-22T04:01:49.515058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480688"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh/knownhosts. This vulnerability occurs because the system did not correctly check for the revocation status of a SignatureKey belonging to a Certificate Authority (CA). A remote attacker could potentially exploit this by presenting a revoked key, leading to the system accepting it as valid. This could allow an attacker to bypass security checks and potentially gain unauthorized access or spoof legitimate entities.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: A flaw in `golang.org/x/crypto/ssh/knownhosts` allows a remote attacker to bypass security checks. This vulnerability arises because the system fails to properly verify the revocation status of a Certificate Authority (CA) `SignatureKey`. In Red Hat environments, this could enable an attacker to present a revoked key, leading to its acceptance as valid and potentially granting unauthorized access or facilitating the spoofing of legitimate entities.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-42508"
},
{
"category": "external",
"summary": "RHBZ#2480688",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480688"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-42508",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-42508"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42508"
},
{
"category": "external",
"summary": "https://go.dev/cl/781220",
"url": "https://go.dev/cl/781220"
},
{
"category": "external",
"summary": "https://go.dev/issue/79568",
"url": "https://go.dev/issue/79568"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5021",
"url": "https://pkg.go.dev/vuln/GO-2026-5021"
}
],
"release_date": "2026-05-22T02:31:27.644000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.4,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh/knownhosts: golang: golang.org/x/crypto/ssh/knownhosts: Revocation bypass via unchecked SignatureKey"
},
{
"cve": "CVE-2026-44740",
"cwe": {
"id": "CWE-606",
"name": "Unchecked Input for Loop Condition"
},
"discovery_date": "2026-06-01T17:01:53.685793+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2483894"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Billy, an interface filesystem abstraction for Go. This vulnerability allows a remote attacker to cause a Denial of Service (DoS) by providing crafted or malformed input. The issue arises from insufficient validation and missing safety mechanisms when processing untrusted repository data and filesystem structures, leading to panics, infinite loops, uncontrolled recursion, or excessive resource consumption.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is rated as an Important severity issue. The `go-billy` library, a Go filesystem abstraction, is vulnerable to a denial of service when processing crafted or malformed input, such as untrusted repository data or filesystem structures. Insufficient validation and missing safety mechanisms can lead to panics, infinite loops, or excessive resource consumption, potentially impacting the availability of applications that rely on this library.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-44740"
},
{
"category": "external",
"summary": "RHBZ#2483894",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2483894"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-44740",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-44740"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-44740"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v5.9.0",
"url": "https://github.com/go-git/go-billy/releases/tag/v5.9.0"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1",
"url": "https://github.com/go-git/go-billy/releases/tag/v6.0.0-alpha.1"
},
{
"category": "external",
"summary": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6",
"url": "https://github.com/go-git/go-billy/security/advisories/GHSA-m3xc-h892-ggx6"
}
],
"release_date": "2026-06-01T16:04:50.358000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "To mitigate the issue, we suggest upgrading to versions 5.9.0+ or 6.0.0-alpha.1+",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/go-git/go-billy: Billy: Denial of Service via crafted input due to insufficient validation"
},
{
"cve": "CVE-2026-46595",
"cwe": {
"id": "CWE-303",
"name": "Incorrect Implementation of Authentication Algorithm"
},
"discovery_date": "2026-05-22T04:01:52.215134+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480689"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. Source-address validation can be skipped when an SSH server configuration uses an authentication callback type other than public key, allowing authorization bypass in misconfigured servers. This is a follow-on to incomplete coverage from the CVE-2024-45337 fix.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "golang.org/x/crypto/ssh is vulnerable to authorization bypass when SSH server configurations rely on source-address validation alongside non-public-key authentication callbacks. An attacker with low privileges who can authenticate through such a callback path may bypass intended source-address restrictions and gain unauthorized SSH access. Red Hat impact sits in services built with affected x/crypto/ssh, including RHEL golang streams, hummingbird Go toolchains, RHACM/MCE agents, and OpenShift or Ceph components that embed Go SSH servers with mixed callback types.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46595"
},
{
"category": "external",
"summary": "RHBZ#2480689",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480689"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46595",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46595"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46595"
},
{
"category": "external",
"summary": "https://go.dev/cl/781642",
"url": "https://go.dev/cl/781642"
},
{
"category": "external",
"summary": "https://go.dev/issue/79570",
"url": "https://go.dev/issue/79570"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5023",
"url": "https://pkg.go.dev/vuln/GO-2026-5023"
}
],
"release_date": "2026-05-22T02:31:27.894000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:L",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Authorization bypass due to skipped source-address validation"
},
{
"cve": "CVE-2026-46597",
"cwe": {
"id": "CWE-681",
"name": "Incorrect Conversion between Numeric Types"
},
"discovery_date": "2026-05-22T04:01:21.721980+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2480678"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/crypto/ssh. A remote attacker could send specially crafted inputs to the AES-GCM packet decoder. This could lead to an incorrectly placed cast from bytes to an integer, causing a server-side panic and resulting in a Denial of Service (DoS) for the affected system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This Important denial of service flaw in `golang.org/x/crypto/ssh` allows a remote attacker to trigger a server-side panic by sending specially crafted inputs to the AES-GCM packet decoder. This vulnerability could lead to service unavailability in Red Hat products that incorporate and expose SSH services built with the affected `golang.org/x/crypto/ssh` component.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-46597"
},
{
"category": "external",
"summary": "RHBZ#2480678",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2480678"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-46597",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-46597"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-46597"
},
{
"category": "external",
"summary": "https://go.dev/cl/781620",
"url": "https://go.dev/cl/781620"
},
{
"category": "external",
"summary": "https://go.dev/issue/79561",
"url": "https://go.dev/issue/79561"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI",
"url": "https://groups.google.com/g/golang-announce/c/a082jnz-LvI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5013",
"url": "https://pkg.go.dev/vuln/GO-2026-5013"
}
],
"release_date": "2026-05-22T02:31:26.754000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/crypto/ssh: golang.org/x/crypto/ssh: Denial of Service via crafted AES-GCM packet decoder inputs"
},
{
"cve": "CVE-2026-53488",
"cwe": {
"id": "CWE-78",
"name": "Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)"
},
"discovery_date": "2026-07-01T02:01:09.589815+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2495815"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw was found in containerd where the CRI plugin propagates labels from an image configuration (LABEL instruction in a Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host via a plugin that consumes container labels for operations, such as the restart-monitor binary:// logger. An attacker who can cause a crafted container image to be pulled and run can achieve host-level code execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53488"
},
{
"category": "external",
"summary": "RHBZ#2495815",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2495815"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53488",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53488"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53488"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp"
}
],
"release_date": "2026-07-01T00:11:20.610000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin"
},
{
"cve": "CVE-2026-53492",
"cwe": {
"id": "CWE-807",
"name": "Reliance on Untrusted Inputs in a Security Decision"
},
"discovery_date": "2026-07-01T19:01:34.238078+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2496130"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) implementation, which allows Kubernetes to interact with container runtimes, improperly trusts Container Device Interface (CDI) annotations found within untrusted checkpoint image metadata during container restoration. This vulnerability enables a user with permissions to create pods to bypass standard Kubernetes resource allocation and device plugin enforcement. Consequently, an attacker can inject arbitrary CDI edits, such as device nodes and host mounts, into the restored container, potentially leading to unauthorized resource access or privilege escalation.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration.",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This flaw is rated as Important. In Red Hat OpenShift Container Platform, a user with pod creation permissions could bypass standard Kubernetes resource allocation and device plugin enforcement. This is due to containerd\u0027s Container Runtime Interface (CRI) improperly trusting Container Device Interface (CDI) annotations during container restoration. Exploitation requires CDI to be enabled on the node and a matching host CDI specification for the requested device.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-53492"
},
{
"category": "external",
"summary": "RHBZ#2496130",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2496130"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-53492",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-53492"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-53492"
},
{
"category": "external",
"summary": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc",
"url": "https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc"
}
],
"release_date": "2026-07-01T17:59:12.552000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.2,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/containerd/containerd: containerd: Security bypass via Container Device Interface (CDI) annotation smuggling during checkpoint restoration."
},
{
"cve": "CVE-2026-56852",
"cwe": {
"id": "CWE-835",
"name": "Loop with Unreachable Exit Condition (\u0027Infinite Loop\u0027)"
},
"discovery_date": "2026-07-21T20:01:56.266823+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2504233"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in golang.org/x/text. The norm.Iter component can enter an infinite loop when processing input that contains invalid UTF-8 (Unicode Transformation Format - 8-bit) bytes. A remote attacker could exploit this vulnerability by providing specially crafted input, leading to a Denial of Service (DoS) condition where the affected application becomes unresponsive.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: This flaw in the `golang.org/x/text` library can lead to a denial of service. An attacker could provide specially crafted invalid UTF-8 input to an application using the affected `norm.Iter` functionality, causing it to enter an infinite loop and become unresponsive.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56852"
},
{
"category": "external",
"summary": "RHBZ#2504233",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2504233"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56852",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56852"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56852"
},
{
"category": "external",
"summary": "https://go.dev/cl/794100",
"url": "https://go.dev/cl/794100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80142",
"url": "https://go.dev/issue/80142"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-5970",
"url": "https://pkg.go.dev/vuln/GO-2026-5970"
}
],
"release_date": "2026-07-21T19:18:59.951000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "golang.org/x/text: golang.org/x/text: Denial of Service via invalid UTF-8 input"
},
{
"cve": "CVE-2026-56853",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:14:53.561638+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515827"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `net/http` component of the Go standard library. When a server is configured to support unencrypted HTTP/2, it reads initial bytes from new connections to detect the HTTP/2 client preface. However, the `ReadHeaderTimeout` is not correctly applied during this process. This oversight could allow a remote attacker to maintain open connections indefinitely, potentially leading to a Denial of Service (DoS) by exhausting server resources.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "Important: Unencrypted HTTP/2 servers are susceptible to a denial of service due to improper handling of ReadHeaderTimeout during the client preface reading phase. This can lead to resource exhaustion and service unavailability in affected Red Hat products configured to support unencrypted HTTP/2.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56853"
},
{
"category": "external",
"summary": "RHBZ#2515827",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515827"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56853",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56853"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56853"
},
{
"category": "external",
"summary": "https://go.dev/cl/795540",
"url": "https://go.dev/cl/795540"
},
{
"category": "external",
"summary": "https://go.dev/issue/80205",
"url": "https://go.dev/issue/80205"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6089",
"url": "https://pkg.go.dev/vuln/GO-2026-6089"
}
],
"release_date": "2026-08-13T21:58:53.092000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/http: golang: Go net/http: Unencrypted HTTP/2 connections vulnerable to Denial of Service"
},
{
"cve": "CVE-2026-56858",
"cwe": {
"id": "CWE-79",
"name": "Improper Neutralization of Input During Web Page Generation (\u0027Cross-site Scripting\u0027)"
},
"discovery_date": "2026-08-13T22:16:32.034590+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515838"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `html/template` component of Go (golang). Pathological inputs could prematurely close an unescaped forward slash (\u0027/\u0027), allowing an attacker to inject arbitrary content. This could lead to Cross-Site Scripting (XSS), where malicious scripts are executed in a user\u0027s browser, potentially compromising user data or actions.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important cross-site scripting (XSS) vulnerability in the Go `html/template` package. Applications utilizing this package to render untrusted input are susceptible to arbitrary content injection due to a flaw in how pathological inputs are handled, potentially leading to client-side script execution.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56858"
},
{
"category": "external",
"summary": "RHBZ#2515838",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515838"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56858",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56858"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56858"
},
{
"category": "external",
"summary": "https://go.dev/cl/807100",
"url": "https://go.dev/cl/807100"
},
{
"category": "external",
"summary": "https://go.dev/issue/80435",
"url": "https://go.dev/issue/80435"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6091",
"url": "https://pkg.go.dev/vuln/GO-2026-6091"
}
],
"release_date": "2026-08-13T21:58:53.354000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 8.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "html/template: golang: Go html/template: Cross-Site Scripting via pathological input"
},
{
"cve": "CVE-2026-56859",
"cwe": {
"id": "CWE-776",
"name": "Improper Restriction of Recursive Entity References in DTDs (\u0027XML Entity Expansion\u0027)"
},
"discovery_date": "2026-08-13T22:16:52.493058+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515840"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `encoding/xml` package of Go. The `DecodeElement` function failed to correctly track recursion depth, which could lead to stack exhaustion. A remote attacker could exploit this vulnerability by providing a specially crafted XML input, resulting in a Denial of Service (DoS) for the affected application.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "An Important denial of service flaw affects applications utilizing the Go `encoding/xml` package. This vulnerability arises from an issue in XML decoding where a recursion depth counter fails to reset, potentially leading to stack exhaustion when processing malicious XML input.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56859"
},
{
"category": "external",
"summary": "RHBZ#2515840",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515840"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56859",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56859"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56859"
},
{
"category": "external",
"summary": "https://go.dev/cl/803320",
"url": "https://go.dev/cl/803320"
},
{
"category": "external",
"summary": "https://go.dev/issue/80481",
"url": "https://go.dev/issue/80481"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6088",
"url": "https://pkg.go.dev/vuln/GO-2026-6088"
}
],
"release_date": "2026-08-13T21:58:52.959000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "encoding/xml: golang: Go: Denial of Service via XML decoding recursion depth issue"
},
{
"cve": "CVE-2026-56860",
"cwe": {
"id": "CWE-770",
"name": "Allocation of Resources Without Limits or Throttling"
},
"discovery_date": "2026-08-13T22:13:18.319384+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515820"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in `net/url`, a component of `golang`. This vulnerability arises when resolving relative paths that contain numerous parent directory (\u0027..\u0027) segments. A remote attacker could exploit this by providing a specially crafted path, leading to quadratic time complexity and excessive memory allocation. This can result in a Denial of Service (DoS) due to resource exhaustion.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service flaw in the Go `net/url` package. Applications built with Go that process untrusted URLs containing parent directory segments (\u0027..\u0027) may be vulnerable to excessive resource consumption due to quadratic time complexity in path resolution. This can lead to a denial of service, impacting the availability of affected services.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56860"
},
{
"category": "external",
"summary": "RHBZ#2515820",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515820"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56860",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56860"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56860"
},
{
"category": "external",
"summary": "https://go.dev/cl/803681",
"url": "https://go.dev/cl/803681"
},
{
"category": "external",
"summary": "https://go.dev/issue/80494",
"url": "https://go.dev/issue/80494"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6218",
"url": "https://pkg.go.dev/vuln/GO-2026-6218"
}
],
"release_date": "2026-08-13T21:58:53.731000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "net/url: golang: golang net/url: Denial of Service from quadratic complexity in path resolution"
},
{
"cve": "CVE-2026-56862",
"cwe": {
"id": "CWE-1050",
"name": "Excessive Platform Resource Consumption within a Loop"
},
"discovery_date": "2026-08-13T22:16:41.928450+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2515839"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in the `crypto/tls` package, part of `golang`. A malicious client can exploit this vulnerability by continuously sending KeyUpdate messages to a server. This forces the server to perform indefinite key derivation operations, leading to resource exhaustion and a Denial of Service (DoS) condition.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "This is an Important denial of service vulnerability in the `golang` `crypto/tls` package. A remote, unauthenticated attacker can exploit this flaw by continuously sending `KeyUpdate` messages during a TLS handshake, forcing the server to perform indefinite key derivation operations. This resource exhaustion can lead to a denial of service for applications and services in Red Hat products that use the affected `crypto/tls` library and are exposed to untrusted network clients.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-56862"
},
{
"category": "external",
"summary": "RHBZ#2515839",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2515839"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-56862",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-56862"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-56862"
},
{
"category": "external",
"summary": "https://go.dev/cl/804261",
"url": "https://go.dev/cl/804261"
},
{
"category": "external",
"summary": "https://go.dev/issue/80528",
"url": "https://go.dev/issue/80528"
},
{
"category": "external",
"summary": "https://groups.google.com/g/golang-announce/c/94pEornpRlI",
"url": "https://groups.google.com/g/golang-announce/c/94pEornpRlI"
},
{
"category": "external",
"summary": "https://pkg.go.dev/vuln/GO-2026-6090",
"url": "https://pkg.go.dev/vuln/GO-2026-6090"
}
],
"release_date": "2026-08-13T21:58:53.216000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "crypto/tls: golang: Golang crypto/tls: Denial of Service via indefinite KeyUpdate messages"
},
{
"cve": "CVE-2026-71235",
"cwe": {
"id": "CWE-94",
"name": "Improper Control of Generation of Code (\u0027Code Injection\u0027)"
},
"discovery_date": "2026-08-05T12:07:04.533964+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2511475"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in Magistrala\u0027s Rules Engine. An authenticated low-privileged user can exploit this vulnerability by creating rules with embedded Go or Lua scripts. These scripts are executed server-side without sufficient validation, allowing for arbitrary file read and write operations, access to internal databases, and Server-Side Request Forgery (SSRF) against internal microservices. This could lead to significant data compromise and unauthorized system access.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution",
"title": "Vulnerability summary"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-71235"
},
{
"category": "external",
"summary": "RHBZ#2511475",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2511475"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-71235",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-71235"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-71235",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-71235"
},
{
"category": "external",
"summary": "https://github.com/absmach/magistrala",
"url": "https://github.com/absmach/magistrala"
}
],
"release_date": "2026-08-05T10:56:25.198000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8.8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Important"
}
],
"title": "github.com/absmach/magistrala: Magistrala IoT Platform: Arbitrary Code Execution via Unrestricted Script Execution"
},
{
"cve": "CVE-2026-75593",
"cwe": {
"id": "CWE-22",
"name": "Improper Limitation of a Pathname to a Restricted Directory (\u0027Path Traversal\u0027)"
},
"discovery_date": "2026-08-19T20:21:08.000514+00:00",
"flags": [
{
"label": "vulnerable_code_not_present",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"ids": [
{
"system_name": "Red Hat Bugzilla ID",
"text": "2519913"
}
],
"notes": [
{
"category": "description",
"text": "A flaw was found in BuildKit, a toolkit for converting source code to build artifacts. A malicious client with valid permissions to access the BuildKit control API can craft a special upload request. This request allows files to escape from the BuildKit-controlled state directory, potentially leading to unauthorized modification or deletion of files on the system.",
"title": "Vulnerability description"
},
{
"category": "summary",
"text": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification",
"title": "Vulnerability summary"
},
{
"category": "other",
"text": "A flaw in BuildKit allows a client with valid permissions to the BuildKit control API to perform unauthorized file modifications outside the intended build state directory. This issue is limited to authenticated clients, reducing the overall attack surface.",
"title": "Statement"
},
{
"category": "general",
"text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product\u0027s status, and are included for informational purposes to better understand the severity of this vulnerability.",
"title": "CVSS score applicability"
}
],
"product_status": {
"fixed": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"known_not_affected": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
},
"references": [
{
"category": "self",
"summary": "Canonical URL",
"url": "https://access.redhat.com/security/cve/CVE-2026-75593"
},
{
"category": "external",
"summary": "RHBZ#2519913",
"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2519913"
},
{
"category": "external",
"summary": "https://www.cve.org/CVERecord?id=CVE-2026-75593",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-75593"
},
{
"category": "external",
"summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2026-75593"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/releases/tag/v0.31.2",
"url": "https://github.com/moby/buildkit/releases/tag/v0.31.2"
},
{
"category": "external",
"summary": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976",
"url": "https://github.com/moby/buildkit/security/advisories/GHSA-g2h8-426c-7976"
}
],
"release_date": "2026-08-19T20:06:54.924000+00:00",
"remediations": [
{
"category": "vendor_fix",
"date": "2026-09-09T14:59:15+00:00",
"details": "Before applying this update, make sure all previously released errata\nrelevant to your system have been applied.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x"
],
"restart_required": {
"category": "none"
},
"url": "https://access.redhat.com/errata/RHSA-2026:66022"
},
{
"category": "workaround",
"details": "Restrict access to the BuildKit control API to only trusted users and services. Implement robust authentication and authorization policies for all clients interacting with the BuildKit daemon to prevent unauthorized access and potential file system escapes.",
"product_ids": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"scores": [
{
"cvss_v3": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N",
"version": "3.1"
},
"products": [
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:86b2b917fa9e60362acef43cd2710e17ab3fce4f1a1264f2457dd0a549a19e3d_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:bfe2b3f1eb23812e5ea190aa5e308b14050c4b92636bbdc510e5dcd0664e8c8c_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:c9086940a41eb912f5e6f1527d787421744a3d3e0f6958616f183e7b8e6109cb_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-cli-binaries-rhel9@sha256:e495d40f9da17b8566c49e7121cfbb4fd4b79408afc1fc04cfea3e56378b9ea7_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:1aea1f487b7caf2f6c102afc7a80edda1738d05f5c41f7d66a6e91ca7b92c6dc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:adc739841238fe4054bcfebbd4fef833684fa7d703fc10f1ab8791796a1e0baa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:b7105a4da85893ae5b2869e475d2ee17a54ba06c316d8f24143b8fbf67c3b87f_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-hypershift-velero-plugin-rhel9@sha256:f3354f5ebb22d2efb209da7935f6245b06f354cc0a246beae07067dfd568aa80_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:0e36cf8d11f557fda21e66dfb596a27126d78864671f852b567ba9657fc5f3c0_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:678abccd66e9574a8b3bb333bf93b6179a3b95ab2ef465008907453eeecfee32_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:87b1ae0dc54b6ce5f1db04d82afe47b4fc9a895df5d453ca1579ae7142f82dfa_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-kubevirt-velero-plugin-rhel9@sha256:9308951a40603e841f93e1126e3ff1dee92c0102ea19aeb3f594605861c66b8d_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:1c737c4d68f7d2f053aa52e28cd5a4af40d8eeb766f1d70d751ae996b537cab9_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:2f89f2bb91f00dfaa6e58acc1d11f4ebd45f2133ed35483ab492a48c448ff601_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:3e2dcd67840ee18ac548ab98b7381fecad0f2a465dd0c53bb935632941057c0e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-mustgather-rhel9@sha256:c2b67773686988ba3e1e22caf8aec477347bb0702fb530d9db208d1641a0ceb9_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:5f87e37756b9a95f45de74f134b02039cff9895eaabcfeb42df7e323ceb9288f_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:6a8540ca8247f8b7591dad5ce5921b5a5b23a8817d7824c1024b86bca0cf7d37_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:919db373731de8c371a5197596ebaeef9a4d3a65bf408d848a093a0d00e7993c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-non-admin-rhel9@sha256:ba70e9b3bc7188abe19a05b1c1efa1859350611b304c2ddc47dd93698d237662_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-operator-bundle@sha256:e4e8d5f4cf6688139ba9c08cb3136709e8ea9fe65eec0d03bf6bfcbbbf945c6a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:05235069feda59356693d1d675facc7d34b85939af18350c4d084f51bdbe2baf_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:d93edb3b783b1b127c04ac237552e6b79a88dd5c012d54eb38c8224998732883_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f1347b6330634758cb9d4e65902c2ca9f8eb65501c33e033476426913016e0e7_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-rhel9-operator@sha256:f84b4e1d660345626314a8e0ba8f09d1afdc2756bc43fccc68f1abea4a6301ab_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:3f09757662e388a65d09d04163c9c80b7a73203b4dd1cfa8c4cd9537b2f3bf38_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:50b8257a3f52942841b152f8e6941ecb24dc0f294942b7627a2e2892ea83bb19_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:6b17d2f232968adbbc84fe3fb3f325b0dc9b7e46f9ecd3a66962f496c50a5358_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-aws-rhel9@sha256:d926cc6f5045abd71a35afaa9249ab63bcc4eea5f4f9845121c7502b8e0a375e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:7921e36ac0e297c5d5e2f6e826a4cfdec14277d1583fa099f121fcb7315a0d58_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:8474577d7210fb2a96f77ecb1305860ac514424347c9c18e0d2378e073ee0d9c_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:ba6f45dbb6ad302628e84d5578ddd36ccabc3fb691b61a1b511c8d3b1871c66e_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-gcp-rhel9@sha256:d90ca69523fd29a9b1b3a6ed499f4f86b920a932cb697a8c19a81c84e4b08084_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:38d4ed87fccc7eda4449310a3247433628547d25c236dcf87b77cb526d615b6c_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:54f918b5b00717a66d4e181dba63697346ea9e9988d58acff22e376dd76678f9_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:b503642fd066f22bb7ff2ae0a4cc133efea7940414583dd7f4c84bfa61a34e2a_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-legacy-aws-rhel9@sha256:dcb626fcf29e18860fc2caf07c687960532949a6e2f58a60a51aaf965e5b11ef_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:3caca12240291364ca85120376eb681560ce29225eb0b227db0947db6f30cc01_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:51b8b3ebe2420d5c9a77edb4b462833282ec1402c0721de51f6c05203a14a2e2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:aa7f2e0dc429fceb2c788f8de1e77055e5f2aaac6aef20411a1b8f09260cda90_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-for-microsoft-azure-rhel9@sha256:d3580c46e47a415b07781ed94383c25e7a11f6a57d2d340b17e1b93a08113f60_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:442697c65e3af373fe5e666ba0e2317199ed430ad6f1d6942725760424bc7a14_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:4c0dc60e5f913c9cc6cb1373f92327dd1eac8ffae0c32dfb30cbfa995f1131cc_arm64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:6f4b6e6e8fe0af204cd3a0811a1a5dd17caac6fb2e41c10e97525f6a70f191ae_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-plugin-rhel9@sha256:8a9ee069a040c2ec642dfba44d81f7ce9a14b048297e7389108a13645c8a0208_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:04b4626a3d428bd698f57a92d9559975990e77146c3e6f9cffdc9ad8111ea56a_ppc64le",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:3243c64dc7c12670afab7101591cf9cba9ec441b1a38b88b0fc42800a51178b2_s390x",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:6e23fb5a078132a2badd9365bf3580e6cd9cea7684a0206a3860cf93f615cae1_amd64",
"OpenShift API for Data Protection 1.5:registry.redhat.io/oadp/oadp-velero-rhel9@sha256:ae002e6c8696ecc6224e73a4c0d3a636a27ad09a2bfcb871edc320af23d9058e_arm64"
]
}
],
"threats": [
{
"category": "impact",
"details": "Moderate"
}
],
"title": "github.com/moby/buildkit: BuildKit: File escape vulnerability allows unauthorized file modification"
}
]
}
SUSE-SU-2026:22154-1
Vulnerability from csaf_suse - Published: 2026-06-17 08:36 - Updated: 2026-06-17 08:36Summary
Security update for go1.26
Severity
Moderate
Notes
Title of the patch: Security update for go1.26
Description of the patch: This update for go1.26 fixes the following issues
Update to go1.26.4 (bsc#1255111):
- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).
- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).
- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).
Changes:
* go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader
* go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors
without any escaping
* go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once
* go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation
* go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26
* go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side
effect count
* go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64
Patchnames: SUSE-SLES-16.0-941
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.26",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.26 fixes the following issues\n\nUpdate to go1.26.4 (bsc#1255111):\n\n- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).\n- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).\n- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).\n\nChanges:\n\n * go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader\n * go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors\n without any escaping\n * go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once\n * go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation\n * go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26\n * go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side\n effect count\n * go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-941",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22154-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22154-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622154-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22154-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026933.html"
},
{
"category": "self",
"summary": "SUSE Bug 1245878",
"url": "https://bugzilla.suse.com/1245878"
},
{
"category": "self",
"summary": "SUSE Bug 1255111",
"url": "https://bugzilla.suse.com/1255111"
},
{
"category": "self",
"summary": "SUSE Bug 1264395",
"url": "https://bugzilla.suse.com/1264395"
},
{
"category": "self",
"summary": "SUSE Bug 1267442",
"url": "https://bugzilla.suse.com/1267442"
},
{
"category": "self",
"summary": "SUSE Bug 1267444",
"url": "https://bugzilla.suse.com/1267444"
},
{
"category": "self",
"summary": "SUSE Bug 1267450",
"url": "https://bugzilla.suse.com/1267450"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42507 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42507/"
}
],
"title": "Security update for go1.26",
"tracking": {
"current_release_date": "2026-06-17T08:36:56Z",
"generator": {
"date": "2026-06-17T08:36:56Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22154-1",
"initial_release_date": "2026-06-17T08:36:56Z",
"revision_history": [
{
"date": "2026-06-17T08:36:56Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-160000.1.1.aarch64",
"product": {
"name": "go1.26-1.26.4-160000.1.1.aarch64",
"product_id": "go1.26-1.26.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-160000.1.1.aarch64",
"product": {
"name": "go1.26-doc-1.26.4-160000.1.1.aarch64",
"product_id": "go1.26-doc-1.26.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-libstd-1.26.4-160000.1.1.aarch64",
"product": {
"name": "go1.26-libstd-1.26.4-160000.1.1.aarch64",
"product_id": "go1.26-libstd-1.26.4-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-160000.1.1.aarch64",
"product": {
"name": "go1.26-race-1.26.4-160000.1.1.aarch64",
"product_id": "go1.26-race-1.26.4-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-160000.1.1.ppc64le",
"product": {
"name": "go1.26-1.26.4-160000.1.1.ppc64le",
"product_id": "go1.26-1.26.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-160000.1.1.ppc64le",
"product": {
"name": "go1.26-doc-1.26.4-160000.1.1.ppc64le",
"product_id": "go1.26-doc-1.26.4-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-160000.1.1.ppc64le",
"product": {
"name": "go1.26-race-1.26.4-160000.1.1.ppc64le",
"product_id": "go1.26-race-1.26.4-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-160000.1.1.s390x",
"product": {
"name": "go1.26-1.26.4-160000.1.1.s390x",
"product_id": "go1.26-1.26.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-160000.1.1.s390x",
"product": {
"name": "go1.26-doc-1.26.4-160000.1.1.s390x",
"product_id": "go1.26-doc-1.26.4-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-160000.1.1.s390x",
"product": {
"name": "go1.26-race-1.26.4-160000.1.1.s390x",
"product_id": "go1.26-race-1.26.4-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-160000.1.1.x86_64",
"product": {
"name": "go1.26-1.26.4-160000.1.1.x86_64",
"product_id": "go1.26-1.26.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-160000.1.1.x86_64",
"product": {
"name": "go1.26-doc-1.26.4-160000.1.1.x86_64",
"product_id": "go1.26-doc-1.26.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-libstd-1.26.4-160000.1.1.x86_64",
"product": {
"name": "go1.26-libstd-1.26.4-160000.1.1.x86_64",
"product_id": "go1.26-libstd-1.26.4-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-160000.1.1.x86_64",
"product": {
"name": "go1.26-race-1.26.4-160000.1.1.x86_64",
"product_id": "go1.26-race-1.26.4-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-libstd-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-libstd-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-libstd-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-libstd-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-libstd-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27145"
}
],
"notes": [
{
"category": "general",
"text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27145",
"url": "https://www.suse.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "SUSE Bug 1267450 for CVE-2026-27145",
"url": "https://bugzilla.suse.com/1267450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:56Z",
"details": "moderate"
}
],
"title": "CVE-2026-27145"
},
{
"cve": "CVE-2026-42504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42504"
}
],
"notes": [
{
"category": "general",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42504",
"url": "https://www.suse.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "SUSE Bug 1267442 for CVE-2026-42504",
"url": "https://bugzilla.suse.com/1267442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:56Z",
"details": "moderate"
}
],
"title": "CVE-2026-42504"
},
{
"cve": "CVE-2026-42507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42507"
}
],
"notes": [
{
"category": "general",
"text": "When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42507",
"url": "https://www.suse.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "SUSE Bug 1267444 for CVE-2026-42507",
"url": "https://bugzilla.suse.com/1267444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.26-race-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-doc-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-libstd-1.26.4-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.26-race-1.26.4-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:56Z",
"details": "moderate"
}
],
"title": "CVE-2026-42507"
}
]
}
SUSE-SU-2026:22155-1
Vulnerability from csaf_suse - Published: 2026-06-17 08:36 - Updated: 2026-06-17 08:36Summary
Security update for go1.25
Severity
Moderate
Notes
Title of the patch: Security update for go1.25
Description of the patch: This update for go1.25 fixes the following issues
Update to go1.25.11 (bsc#1244485):
- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).
- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).
- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).
Changes:
* go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader
* go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors
without any escaping
* go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once
* go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation
* go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64
Patchnames: SUSE-SLES-16.0-942
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
28 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
19 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.25",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.25 fixes the following issues\n\nUpdate to go1.25.11 (bsc#1244485):\n\n- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).\n- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).\n- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).\n\nChanges:\n\n * go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader\n * go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors\n without any escaping\n * go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once\n * go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation\n * go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-SLES-16.0-942",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_22155-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:22155-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-202622155-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:22155-1",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026932.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244485",
"url": "https://bugzilla.suse.com/1244485"
},
{
"category": "self",
"summary": "SUSE Bug 1245878",
"url": "https://bugzilla.suse.com/1245878"
},
{
"category": "self",
"summary": "SUSE Bug 1264394",
"url": "https://bugzilla.suse.com/1264394"
},
{
"category": "self",
"summary": "SUSE Bug 1267442",
"url": "https://bugzilla.suse.com/1267442"
},
{
"category": "self",
"summary": "SUSE Bug 1267444",
"url": "https://bugzilla.suse.com/1267444"
},
{
"category": "self",
"summary": "SUSE Bug 1267450",
"url": "https://bugzilla.suse.com/1267450"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42507 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42507/"
}
],
"title": "Security update for go1.25",
"tracking": {
"current_release_date": "2026-06-17T08:36:57Z",
"generator": {
"date": "2026-06-17T08:36:57Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:22155-1",
"initial_release_date": "2026-06-17T08:36:57Z",
"revision_history": [
{
"date": "2026-06-17T08:36:57Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-160000.1.1.aarch64",
"product": {
"name": "go1.25-1.25.11-160000.1.1.aarch64",
"product_id": "go1.25-1.25.11-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-160000.1.1.aarch64",
"product": {
"name": "go1.25-doc-1.25.11-160000.1.1.aarch64",
"product_id": "go1.25-doc-1.25.11-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.11-160000.1.1.aarch64",
"product": {
"name": "go1.25-libstd-1.25.11-160000.1.1.aarch64",
"product_id": "go1.25-libstd-1.25.11-160000.1.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-160000.1.1.aarch64",
"product": {
"name": "go1.25-race-1.25.11-160000.1.1.aarch64",
"product_id": "go1.25-race-1.25.11-160000.1.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-160000.1.1.ppc64le",
"product": {
"name": "go1.25-1.25.11-160000.1.1.ppc64le",
"product_id": "go1.25-1.25.11-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-160000.1.1.ppc64le",
"product": {
"name": "go1.25-doc-1.25.11-160000.1.1.ppc64le",
"product_id": "go1.25-doc-1.25.11-160000.1.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-160000.1.1.ppc64le",
"product": {
"name": "go1.25-race-1.25.11-160000.1.1.ppc64le",
"product_id": "go1.25-race-1.25.11-160000.1.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-160000.1.1.s390x",
"product": {
"name": "go1.25-1.25.11-160000.1.1.s390x",
"product_id": "go1.25-1.25.11-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-160000.1.1.s390x",
"product": {
"name": "go1.25-doc-1.25.11-160000.1.1.s390x",
"product_id": "go1.25-doc-1.25.11-160000.1.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-160000.1.1.s390x",
"product": {
"name": "go1.25-race-1.25.11-160000.1.1.s390x",
"product_id": "go1.25-race-1.25.11-160000.1.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-160000.1.1.x86_64",
"product": {
"name": "go1.25-1.25.11-160000.1.1.x86_64",
"product_id": "go1.25-1.25.11-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-160000.1.1.x86_64",
"product": {
"name": "go1.25-doc-1.25.11-160000.1.1.x86_64",
"product_id": "go1.25-doc-1.25.11-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-libstd-1.25.11-160000.1.1.x86_64",
"product": {
"name": "go1.25-libstd-1.25.11-160000.1.1.x86_64",
"product_id": "go1.25-libstd-1.25.11-160000.1.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-160000.1.1.x86_64",
"product": {
"name": "go1.25-race-1.25.11-160000.1.1.x86_64",
"product_id": "go1.25-race-1.25.11-160000.1.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 16.0",
"product": {
"name": "SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product": {
"name": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:16:16.0:server-sap"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-libstd-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-libstd-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server 16.0",
"product_id": "SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-libstd-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-libstd-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-libstd-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.aarch64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.ppc64le as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.s390x as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-160000.1.1.x86_64 as component of SUSE Linux Enterprise Server for SAP applications 16.0",
"product_id": "SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-160000.1.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP applications 16.0"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27145"
}
],
"notes": [
{
"category": "general",
"text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27145",
"url": "https://www.suse.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "SUSE Bug 1267450 for CVE-2026-27145",
"url": "https://bugzilla.suse.com/1267450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-27145"
},
{
"cve": "CVE-2026-42504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42504"
}
],
"notes": [
{
"category": "general",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42504",
"url": "https://www.suse.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "SUSE Bug 1267442 for CVE-2026-42504",
"url": "https://bugzilla.suse.com/1267442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-42504"
},
{
"cve": "CVE-2026-42507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42507"
}
],
"notes": [
{
"category": "general",
"text": "When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42507",
"url": "https://www.suse.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "SUSE Bug 1267444 for CVE-2026-42507",
"url": "https://bugzilla.suse.com/1267444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server 16.0:go1.25-race-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-doc-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-libstd-1.25.11-160000.1.1.x86_64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.aarch64",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.ppc64le",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.s390x",
"SUSE Linux Enterprise Server for SAP applications 16.0:go1.25-race-1.25.11-160000.1.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-17T08:36:57Z",
"details": "moderate"
}
],
"title": "CVE-2026-42507"
}
]
}
SUSE-SU-2026:2326-1
Vulnerability from csaf_suse - Published: 2026-06-09 19:05 - Updated: 2026-06-09 19:05Summary
Security update for go1.25
Severity
Moderate
Notes
Title of the patch: Security update for go1.25
Description of the patch: This update for go1.25 fixes the following issues
Update to go1.25.11 (bsc#1244485):
- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).
- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).
- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).
Changes:
* go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader
* go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors
without any escaping
* go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once
* go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation
* go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64
Patchnames: SUSE-2026-2326,SUSE-SLE-Module-Development-Tools-15-SP7-2026-2326,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2326,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2326,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2326,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2326
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.25",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.25 fixes the following issues\n\nUpdate to go1.25.11 (bsc#1244485):\n\n- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).\n- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).\n- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).\n\nChanges:\n\n * go#79229 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader\n * go#79425 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors\n without any escaping\n * go#79700 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once\n * go#79190 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation\n * go#79698 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2326,SUSE-SLE-Module-Development-Tools-15-SP7-2026-2326,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2326,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2326,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2326,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2326,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2326,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2326",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2326-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2326-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262326-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2326-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047215.html"
},
{
"category": "self",
"summary": "SUSE Bug 1244485",
"url": "https://bugzilla.suse.com/1244485"
},
{
"category": "self",
"summary": "SUSE Bug 1267442",
"url": "https://bugzilla.suse.com/1267442"
},
{
"category": "self",
"summary": "SUSE Bug 1267444",
"url": "https://bugzilla.suse.com/1267444"
},
{
"category": "self",
"summary": "SUSE Bug 1267450",
"url": "https://bugzilla.suse.com/1267450"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42507 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42507/"
}
],
"title": "Security update for go1.25",
"tracking": {
"current_release_date": "2026-06-09T19:05:52Z",
"generator": {
"date": "2026-06-09T19:05:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2326-1",
"initial_release_date": "2026-06-09T19:05:52Z",
"revision_history": [
{
"date": "2026-06-09T19:05:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-150000.1.41.1.aarch64",
"product": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64",
"product_id": "go1.25-1.25.11-150000.1.41.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"product": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"product_id": "go1.25-doc-1.25.11-150000.1.41.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"product": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"product_id": "go1.25-race-1.25.11-150000.1.41.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-150000.1.41.1.i586",
"product": {
"name": "go1.25-1.25.11-150000.1.41.1.i586",
"product_id": "go1.25-1.25.11-150000.1.41.1.i586"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-150000.1.41.1.i586",
"product": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.i586",
"product_id": "go1.25-doc-1.25.11-150000.1.41.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"product": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"product_id": "go1.25-1.25.11-150000.1.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"product": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"product_id": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"product": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"product_id": "go1.25-race-1.25.11-150000.1.41.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-150000.1.41.1.s390x",
"product": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x",
"product_id": "go1.25-1.25.11-150000.1.41.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"product": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"product_id": "go1.25-doc-1.25.11-150000.1.41.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"product": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"product_id": "go1.25-race-1.25.11-150000.1.41.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.25-1.25.11-150000.1.41.1.x86_64",
"product": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64",
"product_id": "go1.25-1.25.11-150000.1.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"product": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"product_id": "go1.25-doc-1.25.11-150000.1.41.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"product": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"product_id": "go1.25-race-1.25.11-150000.1.41.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-doc-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.25-race-1.25.11-150000.1.41.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
},
"product_reference": "go1.25-race-1.25.11-150000.1.41.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27145"
}
],
"notes": [
{
"category": "general",
"text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27145",
"url": "https://www.suse.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "SUSE Bug 1267450 for CVE-2026-27145",
"url": "https://bugzilla.suse.com/1267450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:05:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-27145"
},
{
"cve": "CVE-2026-42504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42504"
}
],
"notes": [
{
"category": "general",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42504",
"url": "https://www.suse.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "SUSE Bug 1267442 for CVE-2026-42504",
"url": "https://bugzilla.suse.com/1267442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:05:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-42504"
},
{
"cve": "CVE-2026-42507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42507"
}
],
"notes": [
{
"category": "general",
"text": "When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42507",
"url": "https://www.suse.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "SUSE Bug 1267444 for CVE-2026-42507",
"url": "https://bugzilla.suse.com/1267444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.25-race-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-doc-1.25.11-150000.1.41.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.25-race-1.25.11-150000.1.41.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:05:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-42507"
}
]
}
SUSE-SU-2026:2327-1
Vulnerability from csaf_suse - Published: 2026-06-09 19:06 - Updated: 2026-06-09 19:06Summary
Security update for go1.26
Severity
Moderate
Notes
Title of the patch: Security update for go1.26
Description of the patch: This update for go1.26 fixes the following issues
Update to go1.26.4 (bsc#1255111):
- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).
- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).
- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).
Changes:
* go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader
* go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors
without any escaping
* go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once
* go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation
* go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26
* go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side
effect count
* go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64
Patchnames: SUSE-2026-2327,SUSE-SLE-Module-Development-Tools-15-SP7-2026-2327,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2327,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2327,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2327,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2327
Terms of use: CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
6.5 (Medium)
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
5.3 (Medium)
Affected products
Recommended
90 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le | — |
Vendor Fix
|
|
| Unresolved product id: SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64 | — |
Vendor Fix
|
Threats
Impact
moderate
References
17 references
{
"document": {
"aggregate_severity": {
"namespace": "https://www.suse.com/support/security/rating/",
"text": "moderate"
},
"category": "csaf_security_advisory",
"csaf_version": "2.0",
"distribution": {
"text": "Copyright 2024 SUSE LLC. All rights reserved.",
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "en",
"notes": [
{
"category": "summary",
"text": "Security update for go1.26",
"title": "Title of the patch"
},
{
"category": "description",
"text": "This update for go1.26 fixes the following issues\n\nUpdate to go1.26.4 (bsc#1255111):\n\n- CVE-2026-27145: crypto/x509: split candidate hostname only once (bsc#1267450).\n- CVE-2026-42504: mime: quadratic complexity in WordDecoder.DecodeHeader (bsc#1267442).\n- CVE-2026-42507: net/textproto: arbitrary input are included in errors without any escaping (bsc#1267444).\n\nChanges:\n\n * go#79230 go#79217 boo#1267442 security: fix CVE-2026-42504 mime: quadratic complexity in WordDecoder.DecodeHeader\n * go#79426 go#79346 boo#1267444 security: fix CVE-2026-42507 net/textproto: arbitrary input are included in errors \n without any escaping\n * go#79701 go#79694 boo#1267450 security: fix CVE-2026-27145 crypto/x509: split candidate hostname only once\n * go#79191 cmd/compile: Bug in rewrite rules for AMD64 causes SHL instruction overflow and miscompilation\n * go#79226 crypto/internal/fips140/drbg: backport CL 774221 to Go 1.26\n * go#79349 cmd/fix: x/tools/go/analysis/passes/modernize: slicescontains hoists needle expression, changing side \n effect count\n * go#79686 runtime/race: change in 93a4f03 leads to a failed build on Amazon Linux 2 and arm64\n",
"title": "Description of the patch"
},
{
"category": "details",
"text": "SUSE-2026-2327,SUSE-SLE-Module-Development-Tools-15-SP7-2026-2327,SUSE-SLE-Product-HPC-15-SP4-ESPOS-2026-2327,SUSE-SLE-Product-HPC-15-SP4-LTSS-2026-2327,SUSE-SLE-Product-HPC-15-SP5-ESPOS-2026-2327,SUSE-SLE-Product-HPC-15-SP5-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP4-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP5-LTSS-2026-2327,SUSE-SLE-Product-SLES-15-SP6-LTSS-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP4-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP5-2026-2327,SUSE-SLE-Product-SLES_SAP-15-SP6-2026-2327",
"title": "Patchnames"
},
{
"category": "legal_disclaimer",
"text": "CSAF 2.0 data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0).",
"title": "Terms of use"
}
],
"publisher": {
"category": "vendor",
"contact_details": "https://www.suse.com/support/security/contact/",
"name": "SUSE Product Security Team",
"namespace": "https://www.suse.com/"
},
"references": [
{
"category": "external",
"summary": "SUSE ratings",
"url": "https://www.suse.com/support/security/rating/"
},
{
"category": "self",
"summary": "URL of this CSAF notice",
"url": "https://ftp.suse.com/pub/projects/security/csaf/suse-su-2026_2327-1.json"
},
{
"category": "self",
"summary": "URL for SUSE-SU-2026:2327-1",
"url": "https://www.suse.com/support/update/announcement/2026/suse-su-20262327-1/"
},
{
"category": "self",
"summary": "E-Mail link for SUSE-SU-2026:2327-1",
"url": "https://lists.suse.com/pipermail/sle-updates/2026-June/047214.html"
},
{
"category": "self",
"summary": "SUSE Bug 1255111",
"url": "https://bugzilla.suse.com/1255111"
},
{
"category": "self",
"summary": "SUSE Bug 1267442",
"url": "https://bugzilla.suse.com/1267442"
},
{
"category": "self",
"summary": "SUSE Bug 1267444",
"url": "https://bugzilla.suse.com/1267444"
},
{
"category": "self",
"summary": "SUSE Bug 1267450",
"url": "https://bugzilla.suse.com/1267450"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-27145 page",
"url": "https://www.suse.com/security/cve/CVE-2026-27145/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42504 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42504/"
},
{
"category": "self",
"summary": "SUSE CVE CVE-2026-42507 page",
"url": "https://www.suse.com/security/cve/CVE-2026-42507/"
}
],
"title": "Security update for go1.26",
"tracking": {
"current_release_date": "2026-06-09T19:06:52Z",
"generator": {
"date": "2026-06-09T19:06:52Z",
"engine": {
"name": "cve-database.git:bin/generate-csaf.pl",
"version": "1"
}
},
"id": "SUSE-SU-2026:2327-1",
"initial_release_date": "2026-06-09T19:06:52Z",
"revision_history": [
{
"date": "2026-06-09T19:06:52Z",
"number": "1",
"summary": "Current version"
}
],
"status": "final",
"version": "1"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-150000.1.15.1.aarch64",
"product": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64",
"product_id": "go1.26-1.26.4-150000.1.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"product": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"product_id": "go1.26-doc-1.26.4-150000.1.15.1.aarch64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"product": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"product_id": "go1.26-race-1.26.4-150000.1.15.1.aarch64"
}
}
],
"category": "architecture",
"name": "aarch64"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-150000.1.15.1.i586",
"product": {
"name": "go1.26-1.26.4-150000.1.15.1.i586",
"product_id": "go1.26-1.26.4-150000.1.15.1.i586"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-150000.1.15.1.i586",
"product": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.i586",
"product_id": "go1.26-doc-1.26.4-150000.1.15.1.i586"
}
}
],
"category": "architecture",
"name": "i586"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"product": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"product_id": "go1.26-1.26.4-150000.1.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"product": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"product_id": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"product": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"product_id": "go1.26-race-1.26.4-150000.1.15.1.ppc64le"
}
}
],
"category": "architecture",
"name": "ppc64le"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-150000.1.15.1.s390x",
"product": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x",
"product_id": "go1.26-1.26.4-150000.1.15.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"product": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"product_id": "go1.26-doc-1.26.4-150000.1.15.1.s390x"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"product": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"product_id": "go1.26-race-1.26.4-150000.1.15.1.s390x"
}
}
],
"category": "architecture",
"name": "s390x"
},
{
"branches": [
{
"category": "product_version",
"name": "go1.26-1.26.4-150000.1.15.1.x86_64",
"product": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64",
"product_id": "go1.26-1.26.4-150000.1.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"product": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"product_id": "go1.26-doc-1.26.4-150000.1.15.1.x86_64"
}
},
{
"category": "product_version",
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"product": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"product_id": "go1.26-race-1.26.4-150000.1.15.1.x86_64"
}
}
],
"category": "architecture",
"name": "x86_64"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle-module-development-tools:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP7",
"product_id": "SUSE Linux Enterprise Server 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Desktop 15 SP7",
"product_id": "SUSE Linux Enterprise Desktop 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sled:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP7",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc:15:sp7"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-espos:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sle_hpc-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product": {
"name": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles-ltss:15:sp6"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp4"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp5"
}
}
},
{
"category": "product_name",
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product": {
"name": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_identification_helper": {
"cpe": "cpe:/o:suse:sles_sap:15:sp6"
}
}
}
],
"category": "product_family",
"name": "SUSE Linux Enterprise"
}
],
"category": "vendor",
"name": "SUSE"
}
],
"relationships": [
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Module for Development Tools 15 SP7",
"product_id": "SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Module for Development Tools 15 SP7"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP4-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP4-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP5-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP5-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.aarch64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.aarch64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.s390x as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.s390x",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server 15 SP6-LTSS",
"product_id": "SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server 15 SP6-LTSS"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP4",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP4"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP5",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP5"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-doc-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.ppc64le as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
},
{
"category": "default_component_of",
"full_product_name": {
"name": "go1.26-race-1.26.4-150000.1.15.1.x86_64 as component of SUSE Linux Enterprise Server for SAP Applications 15 SP6",
"product_id": "SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
},
"product_reference": "go1.26-race-1.26.4-150000.1.15.1.x86_64",
"relates_to_product_reference": "SUSE Linux Enterprise Server for SAP Applications 15 SP6"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-27145"
}
],
"notes": [
{
"category": "general",
"text": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-27145",
"url": "https://www.suse.com/security/cve/CVE-2026-27145"
},
{
"category": "external",
"summary": "SUSE Bug 1267450 for CVE-2026-27145",
"url": "https://bugzilla.suse.com/1267450"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 3.3,
"baseSeverity": "LOW",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:L",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:06:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-27145"
},
{
"cve": "CVE-2026-42504",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42504"
}
],
"notes": [
{
"category": "general",
"text": "Decoding a maliciously-crafted MIME header containing many invalid encoded-words can consume excessive CPU.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42504",
"url": "https://www.suse.com/security/cve/CVE-2026-42504"
},
{
"category": "external",
"summary": "SUSE Bug 1267442 for CVE-2026-42504",
"url": "https://bugzilla.suse.com/1267442"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 6.5,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:06:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-42504"
},
{
"cve": "CVE-2026-42507",
"ids": [
{
"system_name": "SUSE CVE Page",
"text": "https://www.suse.com/security/cve/CVE-2026-42507"
}
],
"notes": [
{
"category": "general",
"text": "When returning errors, functions in the net/textproto package would include its input as part of the error. This might allow an attacker to inject misleading content to errors that are printed or logged.",
"title": "CVE description"
}
],
"product_status": {
"recommended": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
},
"references": [
{
"category": "external",
"summary": "CVE-2026-42507",
"url": "https://www.suse.com/security/cve/CVE-2026-42507"
},
{
"category": "external",
"summary": "SUSE Bug 1267444 for CVE-2026-42507",
"url": "https://bugzilla.suse.com/1267444"
}
],
"remediations": [
{
"category": "vendor_fix",
"details": "To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or \"zypper patch\".\n",
"product_ids": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"scores": [
{
"cvss_v3": {
"baseScore": 5.3,
"baseSeverity": "MEDIUM",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N",
"version": "3.1"
},
"products": [
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Module for Development Tools 15 SP7:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP4-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP5-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.aarch64",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.s390x",
"SUSE Linux Enterprise Server 15 SP6-LTSS:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP4:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP5:go1.26-race-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-doc-1.26.4-150000.1.15.1.x86_64",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.ppc64le",
"SUSE Linux Enterprise Server for SAP Applications 15 SP6:go1.26-race-1.26.4-150000.1.15.1.x86_64"
]
}
],
"threats": [
{
"category": "impact",
"date": "2026-06-09T19:06:52Z",
"details": "moderate"
}
],
"title": "CVE-2026-42507"
}
]
}
ubuntu-cve-2026-27145
Vulnerability from osv_ubuntu
Published
2026-06-02 23:16
Modified
2026-07-08 20:53
Summary
Details
(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, ".") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname's label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.
Severity
6.5 (Medium)
7.5 (High)
N/A (UNKNOWN)
References
{
"affected": [
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.24",
"binary_version": "1.24.4-1ubuntu1~22.04.2"
},
{
"binary_name": "golang-1.24-go",
"binary_version": "1.24.4-1ubuntu1~22.04.2"
},
{
"binary_name": "golang-1.24-src",
"binary_version": "1.24.4-1ubuntu1~22.04.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:22.04:LTS",
"name": "golang-1.24",
"purl": "pkg:deb/ubuntu/golang-1.24@1.24.4-1ubuntu1~22.04.2?arch=source\u0026distro=jammy"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.24.4-1ubuntu1~22.04.1",
"1.24.4-1ubuntu1~22.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.24",
"binary_version": "1.24.4-1ubuntu1~24.04.2"
},
{
"binary_name": "golang-1.24-go",
"binary_version": "1.24.4-1ubuntu1~24.04.2"
},
{
"binary_name": "golang-1.24-src",
"binary_version": "1.24.4-1ubuntu1~24.04.2"
}
]
},
"package": {
"ecosystem": "Ubuntu:24.04:LTS",
"name": "golang-1.24",
"purl": "pkg:deb/ubuntu/golang-1.24@1.24.4-1ubuntu1~24.04.2?arch=source\u0026distro=noble"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.24.4-1ubuntu1~24.04.1",
"1.24.4-1ubuntu1~24.04.2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.24",
"binary_version": "1.24.4-1ubuntu1"
},
{
"binary_name": "golang-1.24-go",
"binary_version": "1.24.4-1ubuntu1"
},
{
"binary_name": "golang-1.24-src",
"binary_version": "1.24.4-1ubuntu1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "golang-1.24",
"purl": "pkg:deb/ubuntu/golang-1.24@1.24.4-1ubuntu1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.24.2-1",
"1.24.2-2",
"1.24.4-1",
"1.24.4-1ubuntu1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.25",
"binary_version": "1.25.7-2~25.10.1"
},
{
"binary_name": "golang-1.25-go",
"binary_version": "1.25.7-2~25.10.1"
},
{
"binary_name": "golang-1.25-src",
"binary_version": "1.25.7-2~25.10.1"
}
]
},
"package": {
"ecosystem": "Ubuntu:25.10",
"name": "golang-1.25",
"purl": "pkg:deb/ubuntu/golang-1.25@1.25.7-2~25.10.1?arch=source\u0026distro=questing"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.25.0-0ubuntu1",
"1.25.7-2~25.10.1"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.24",
"binary_version": "1.24.13-2"
},
{
"binary_name": "golang-1.24-go",
"binary_version": "1.24.13-2"
},
{
"binary_name": "golang-1.24-src",
"binary_version": "1.24.13-2"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "golang-1.24",
"purl": "pkg:deb/ubuntu/golang-1.24@1.24.13-2?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.24.4-1ubuntu1",
"1.24.9-1",
"1.24.13-2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.25",
"binary_version": "1.25.7-2"
},
{
"binary_name": "golang-1.25-go",
"binary_version": "1.25.7-2"
},
{
"binary_name": "golang-1.25-src",
"binary_version": "1.25.7-2"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "golang-1.25",
"purl": "pkg:deb/ubuntu/golang-1.25@1.25.7-2?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.25.0-0ubuntu1",
"1.25.7-2"
]
},
{
"ecosystem_specific": {
"binaries": [
{
"binary_name": "golang-1.26",
"binary_version": "1.26.0-1"
},
{
"binary_name": "golang-1.26-go",
"binary_version": "1.26.0-1"
},
{
"binary_name": "golang-1.26-src",
"binary_version": "1.26.0-1"
}
]
},
"package": {
"ecosystem": "Ubuntu:26.04:LTS",
"name": "golang-1.26",
"purl": "pkg:deb/ubuntu/golang-1.26@1.26.0-1?arch=source\u0026distro=resolute"
},
"ranges": [
{
"events": [
{
"introduced": "0"
}
],
"type": "ECOSYSTEM"
}
],
"versions": [
"1.26~rc3-2",
"1.26.0-1"
]
}
],
"aliases": [],
"details": "(*x509.Certificate).VerifyHostname previously called matchHostnames in a loop over all DNS Subject Alternative Name (SAN) entries. This caused strings.Split(host, \".\") to execute repeatedly on the same input hostname. With a large DNS SAN list, verification costs scaled quadratically based on the number of SAN entries multiplied by the hostname\u0027s label count. Because x509.Verify validates hostnames before building the certificate chain, this overhead occurred even for untrusted certificates.",
"id": "UBUNTU-CVE-2026-27145",
"modified": "2026-07-08T20:53:59Z",
"published": "2026-06-02T23:16:00Z",
"references": [
{
"type": "REPORT",
"url": "https://ubuntu.com/security/CVE-2026-27145"
},
{
"type": "REPORT",
"url": "https://www.cve.org/CVERecord?id=CVE-2026-27145"
},
{
"type": "REPORT",
"url": "https://github.com/golang/go/issues/79694"
},
{
"type": "REPORT",
"url": "https://github.com/golang/go/commit/ce5a3e718cac440defae617dc6ed72a6e94cd0af"
},
{
"type": "REPORT",
"url": "https://github.com/golang/go/commit/c5d18e479475e251c8593b1113fb53836117d5d3"
}
],
"related": [],
"schema_version": "1.7.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:L/A:H",
"type": "CVSS_V3"
},
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H",
"type": "CVSS_V3"
},
{
"score": "medium",
"type": "Ubuntu"
}
],
"upstream": [
"CVE-2026-27145"
]
}
WID-SEC-W-2026-1776
Vulnerability from csaf_certbund - Published: 2026-06-02 22:00 - Updated: 2026-08-10 22:00Summary
Golang Go: Mehrere Schwachstellen
Severity
Hoch
Notes
Das BSI ist als Anbieter für die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch dafür verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgfältig im Einzelfall zu prüfen.
Produktbeschreibung: Go ist eine quelloffene Programmiersprache.
Angriff: Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht näher spezifizierten Angriff durchzuführen, um einen Denial of Service durchzuführen, und um falsche Informationen darzustellen.
Betroffene Betriebssysteme: - Linux
- Sonstiges
- UNIX
- Windows
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Golang Go <1.26.4
Golang / Go
|
<1.26.4 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:-
|
— | |
|
Microsoft Azure Linux azl3
Microsoft / Azure Linux
|
cpe:/o:microsoft:azure_linux:azl3
|
azl3 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
Golang Go <1.25.11
Golang / Go
|
<1.25.11 |
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Golang Go <1.26.4
Golang / Go
|
<1.26.4 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:-
|
— | |
|
Microsoft Azure Linux azl3
Microsoft / Azure Linux
|
cpe:/o:microsoft:azure_linux:azl3
|
azl3 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
Golang Go <1.25.11
Golang / Go
|
<1.25.11 |
Affected products
Known affected
11 products
| Product | Identifier | Version | Remediation |
|---|---|---|---|
|
Golang Go <1.26.4
Golang / Go
|
<1.26.4 | ||
|
SUSE Linux
SUSE
|
cpe:/o:suse:suse_linux:-
|
— | |
|
Red Hat Enterprise Linux
Red Hat
|
cpe:/o:redhat:enterprise_linux:-
|
— | |
|
SUSE openSUSE
SUSE
|
cpe:/o:suse:opensuse:-
|
— | |
|
Amazon Linux 2
Amazon
|
cpe:/o:amazon:linux_2:-
|
— | |
|
IBM Business Automation Workflow
IBM
|
cpe:/a:ibm:business_automation_workflow:-
|
— | |
|
Microsoft Azure Linux azl3
Microsoft / Azure Linux
|
cpe:/o:microsoft:azure_linux:azl3
|
azl3 | |
|
Oracle Linux
Oracle
|
cpe:/o:oracle:linux:-
|
— | |
|
RESF Rocky Linux
RESF
|
cpe:/o:resf:rocky_linux:-
|
— | |
|
Fedora Linux
Fedora
|
cpe:/o:fedoraproject:fedora:-
|
— | |
|
Golang Go <1.25.11
Golang / Go
|
<1.25.11 |
References
103 references
{
"document": {
"aggregate_severity": {
"text": "hoch"
},
"category": "csaf_base",
"csaf_version": "2.0",
"distribution": {
"tlp": {
"label": "WHITE",
"url": "https://www.first.org/tlp/"
}
},
"lang": "de-DE",
"notes": [
{
"category": "legal_disclaimer",
"text": "Das BSI ist als Anbieter f\u00fcr die eigenen, zur Nutzung bereitgestellten Inhalte nach den allgemeinen Gesetzen verantwortlich. Nutzerinnen und Nutzer sind jedoch daf\u00fcr verantwortlich, die Verwendung und/oder die Umsetzung der mit den Inhalten bereitgestellten Informationen sorgf\u00e4ltig im Einzelfall zu pr\u00fcfen."
},
{
"category": "description",
"text": "Go ist eine quelloffene Programmiersprache.",
"title": "Produktbeschreibung"
},
{
"category": "summary",
"text": "Ein Angreifer kann mehrere Schwachstellen in Golang Go ausnutzen, um einen nicht n\u00e4her spezifizierten Angriff durchzuf\u00fchren, um einen Denial of Service durchzuf\u00fchren, und um falsche Informationen darzustellen.",
"title": "Angriff"
},
{
"category": "general",
"text": "- Linux\n- Sonstiges\n- UNIX\n- Windows",
"title": "Betroffene Betriebssysteme"
}
],
"publisher": {
"category": "other",
"contact_details": "csaf-provider@cert-bund.de",
"name": "Bundesamt f\u00fcr Sicherheit in der Informationstechnik",
"namespace": "https://www.bsi.bund.de"
},
"references": [
{
"category": "self",
"summary": "WID-SEC-W-2026-1776 - CSAF Version",
"url": "https://wid.cert-bund.de/.well-known/csaf/white/2026/wid-sec-w-2026-1776.json"
},
{
"category": "self",
"summary": "WID-SEC-2026-1776 - Portal Version",
"url": "https://wid.cert-bund.de/portal/wid/securityadvisory?name=WID-SEC-2026-1776"
},
{
"category": "external",
"summary": "Go Release Notes vom 2026-06-02",
"url": "https://groups.google.com/g/golang-announce/c/tKs3rmcBcKw"
},
{
"category": "external",
"summary": "OSS Security Mailing List vom 2026-06-02",
"url": "https://seclists.org/oss-sec/2026/q2/789"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23264 vom 2026-06-08",
"url": "https://access.redhat.com/errata/RHSA-2026:23264"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:23262 vom 2026-06-08",
"url": "https://access.redhat.com/errata/RHSA-2026:23262"
},
{
"category": "external",
"summary": "Microsoft Security Update Guide vom 2026-06-09",
"url": "https://msrc.microsoft.com/update-guide/"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2327-1 vom 2026-06-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026668.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:2326-1 vom 2026-06-10",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026669.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3383 vom 2026-06-22",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3383.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3382 vom 2026-06-22",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3382.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22154-1 vom 2026-06-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026933.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22155-1 vom 2026-06-23",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-June/026932.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:29980 vom 2026-06-25",
"url": "https://access.redhat.com/errata/RHSA-2026:29980"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-29981 vom 2026-06-27",
"url": "http://linux.oracle.com/errata/ELSA-2026-29981.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:29980 vom 2026-06-26",
"url": "https://errata.build.resf.org/RLSA-2026:29980"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:29981 vom 2026-06-26",
"url": "https://errata.build.resf.org/RLSA-2026:29981"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:33574 vom 2026-06-30",
"url": "https://access.redhat.com/errata/RHSA-2026:33574"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:33612 vom 2026-06-30",
"url": "https://access.redhat.com/errata/RHSA-2026:33612"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-00901A5E8F vom 2026-06-30",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-00901a5e8f"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2ECS-2026-131 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2ECS-2026-131.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2ECS-2026-130 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2ECS-2026-130.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:35832 vom 2026-07-07",
"url": "https://errata.build.resf.org/RLSA-2026:35832"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2DOCKER-2026-135 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2026-135.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2ECS-2026-127 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2ECS-2026-127.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2DOCKER-2026-134 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2DOCKER-2026-134.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2026-112 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2026-112.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3497 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3497.html"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2NITRO-ENCLAVES-2026-114 vom 2026-07-08",
"url": "https://alas.aws.amazon.com/AL2/ALAS2NITRO-ENCLAVES-2026-114.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:36317 vom 2026-07-08",
"url": "https://access.redhat.com/errata/RHSA-2026:36317"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-36317 vom 2026-07-08",
"url": "https://linux.oracle.com/errata/ELSA-2026-36317.html"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:21254-1 vom 2026-07-08",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/2LGP3D2UPZMHLSUXDBVJH34KWCEROZPD/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:37276 vom 2026-07-09",
"url": "https://access.redhat.com/errata/RHSA-2026:37276"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:38995 vom 2026-07-13",
"url": "https://access.redhat.com/errata/RHSA-2026:38995"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:39005 vom 2026-07-13",
"url": "https://access.redhat.com/errata/RHSA-2026:39005"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-2026-B382F3A576 vom 2026-07-14",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-2026-b382f3a576"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22572-1 vom 2026-07-14",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027443.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:39573 vom 2026-07-15",
"url": "https://access.redhat.com/errata/RHSA-2026:39573"
},
{
"category": "external",
"summary": "openSUSE Security Update OPENSUSE-SU-2026:21319-1 vom 2026-07-15",
"url": "https://lists.opensuse.org/archives/list/security-announce@lists.opensuse.org/thread/3JVF2QVKS24ZHXHHAEUPP7C3TBOADRDD/"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:39879 vom 2026-07-15",
"url": "https://access.redhat.com/errata/RHSA-2026:39879"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3047-1 vom 2026-07-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027543.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3046-1 vom 2026-07-15",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027544.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:38995 vom 2026-07-15",
"url": "https://errata.build.resf.org/RLSA-2026:38995"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-38995 vom 2026-07-15",
"url": "https://linux.oracle.com/errata/ELSA-2026-38995.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:22638-1 vom 2026-07-16",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027568.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-35832 vom 2026-07-17",
"url": "http://linux.oracle.com/errata/ELSA-2026-35832.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-19144 vom 2026-07-17",
"url": "https://linux.oracle.com/errata/ELSA-2026-19144.html"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3102-1 vom 2026-07-17",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027622.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:41930 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:41930"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-27740 vom 2026-07-20",
"url": "https://linux.oracle.com/errata/ELSA-2026-27740.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42240 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42240"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42151 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42150 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42150"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42142 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42142"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42080 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42080"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42079 vom 2026-07-21",
"url": "https://access.redhat.com/errata/RHSA-2026:42079"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42051 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42051"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42050 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42050"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42049 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42049"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42043 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42043"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42047 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42047"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42048 vom 2026-07-20",
"url": "https://access.redhat.com/errata/RHSA-2026:42048"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42644 vom 2026-07-21",
"url": "https://access.redhat.com/errata/RHSA-2026:42644"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:42946 vom 2026-07-22",
"url": "https://access.redhat.com/errata/RHSA-2026:42946"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:43038 vom 2026-07-22",
"url": "https://access.redhat.com/errata/RHSA-2026:43038"
},
{
"category": "external",
"summary": "SUSE Security Update SUSE-SU-2026:3151-1 vom 2026-07-21",
"url": "https://lists.suse.com/pipermail/sle-security-updates/2026-July/027687.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-29980 vom 2026-07-22",
"url": "https://linux.oracle.com/errata/ELSA-2026-29980.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:44622 vom 2026-07-23",
"url": "https://access.redhat.com/errata/RHSA-2026:44622"
},
{
"category": "external",
"summary": "Fedora Security Advisory FEDORA-EPEL-2026-8513C30973 vom 2026-07-24",
"url": "https://bodhi.fedoraproject.org/updates/FEDORA-EPEL-2026-8513c30973"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46395 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46395"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:46394 vom 2026-07-27",
"url": "https://access.redhat.com/errata/RHSA-2026:46394"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-39573 vom 2026-07-22",
"url": "http://linux.oracle.com/errata/ELSA-2026-39573.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-46394 vom 2026-07-28",
"url": "https://linux.oracle.com/errata/ELSA-2026-46394.html"
},
{
"category": "external",
"summary": "Oracle Linux Security Advisory ELSA-2026-46395 vom 2026-07-28",
"url": "https://linux.oracle.com/errata/ELSA-2026-46395.html"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:46394 vom 2026-07-28",
"url": "https://errata.build.resf.org/RLSA-2026:46394"
},
{
"category": "external",
"summary": "Rocky Linux Security Advisory RLSA-2026:46395 vom 2026-07-28",
"url": "https://errata.build.resf.org/RLSA-2026:46395"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47149 vom 2026-07-28",
"url": "https://access.redhat.com/errata/RHSA-2026:47149"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47735 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47735"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47737 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47737"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48151 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:48151"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:47952 vom 2026-07-29",
"url": "https://access.redhat.com/errata/RHSA-2026:47952"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48771 vom 2026-07-30",
"url": "https://access.redhat.com/errata/RHSA-2026:48771"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:48891 vom 2026-07-31",
"url": "https://access.redhat.com/errata/RHSA-2026:48891"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49705 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49705"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49703 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49703"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49729 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49729"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49767 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49767"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49770 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49770"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49712 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49712"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49702 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49702"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49765 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49765"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:49744 vom 2026-08-03",
"url": "https://access.redhat.com/errata/RHSA-2026:49744"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50319 vom 2026-08-05",
"url": "https://access.redhat.com/errata/RHSA-2026:50319"
},
{
"category": "external",
"summary": "Amazon Linux Security Advisory ALAS2-2026-3844 vom 2026-08-05",
"url": "https://alas.aws.amazon.com/AL2/ALAS2-2026-3844.html"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50300 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:50300"
},
{
"category": "external",
"summary": "IBM Security Bulletin 7282596 vom 2026-08-05",
"url": "https://www.ibm.com/support/pages/node/7282596"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50205 vom 2026-08-04",
"url": "https://access.redhat.com/errata/RHSA-2026:50205"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50843 vom 2026-08-05",
"url": "https://access.redhat.com/errata/RHSA-2026:50843"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50931 vom 2026-08-06",
"url": "https://access.redhat.com/errata/RHSA-2026:50931"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:50888 vom 2026-08-05",
"url": "https://access.redhat.com/errata/RHSA-2026:50888"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:51057 vom 2026-08-06",
"url": "https://access.redhat.com/errata/RHSA-2026:51057"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:52968 vom 2026-08-10",
"url": "https://access.redhat.com/errata/RHSA-2026:52968"
},
{
"category": "external",
"summary": "Red Hat Security Advisory RHSA-2026:52946 vom 2026-08-10",
"url": "https://access.redhat.com/errata/RHSA-2026:52946"
}
],
"source_lang": "en-US",
"title": "Golang Go: Mehrere Schwachstellen",
"tracking": {
"current_release_date": "2026-08-10T22:00:00.000+00:00",
"generator": {
"date": "2026-08-11T09:37:44.625+00:00",
"engine": {
"name": "BSI-WID",
"version": "1.6.0"
}
},
"id": "WID-SEC-W-2026-1776",
"initial_release_date": "2026-06-02T22:00:00.000+00:00",
"revision_history": [
{
"date": "2026-06-02T22:00:00.000+00:00",
"number": "1",
"summary": "Initiale Fassung"
},
{
"date": "2026-06-08T22:00:00.000+00:00",
"number": "2",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-09T22:00:00.000+00:00",
"number": "3",
"summary": "Neue Updates aufgenommen"
},
{
"date": "2026-06-22T22:00:00.000+00:00",
"number": "4",
"summary": "Neue Updates von Amazon aufgenommen"
},
{
"date": "2026-06-23T22:00:00.000+00:00",
"number": "5",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-06-25T22:00:00.000+00:00",
"number": "6",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-06-28T22:00:00.000+00:00",
"number": "7",
"summary": "Neue Updates von Oracle Linux und Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2026-06-30T22:00:00.000+00:00",
"number": "8",
"summary": "Neue Updates von Red Hat und Fedora aufgenommen"
},
{
"date": "2026-07-07T22:00:00.000+00:00",
"number": "9",
"summary": "Neue Updates von Amazon und Rocky Enterprise Software Foundation aufgenommen"
},
{
"date": "2026-07-08T22:00:00.000+00:00",
"number": "10",
"summary": "Neue Updates von openSUSE aufgenommen"
},
{
"date": "2026-07-09T22:00:00.000+00:00",
"number": "11",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-13T22:00:00.000+00:00",
"number": "12",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-14T22:00:00.000+00:00",
"number": "13",
"summary": "Neue Updates von Fedora, SUSE und Red Hat aufgenommen"
},
{
"date": "2026-07-15T22:00:00.000+00:00",
"number": "14",
"summary": "Neue Updates von SUSE, Rocky Enterprise Software Foundation und Oracle Linux aufgenommen"
},
{
"date": "2026-07-16T22:00:00.000+00:00",
"number": "15",
"summary": "Neue Updates von SUSE aufgenommen"
},
{
"date": "2026-07-19T22:00:00.000+00:00",
"number": "16",
"summary": "Neue Updates von Oracle Linux und SUSE aufgenommen"
},
{
"date": "2026-07-20T22:00:00.000+00:00",
"number": "17",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-21T22:00:00.000+00:00",
"number": "18",
"summary": "Neue Updates von Red Hat und SUSE aufgenommen"
},
{
"date": "2026-07-22T22:00:00.000+00:00",
"number": "19",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-07-23T22:00:00.000+00:00",
"number": "20",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-26T22:00:00.000+00:00",
"number": "21",
"summary": "Neue Updates von Fedora, Red Hat und Oracle Linux aufgenommen"
},
{
"date": "2026-07-27T22:00:00.000+00:00",
"number": "22",
"summary": "Neue Updates von Oracle Linux aufgenommen"
},
{
"date": "2026-07-28T22:00:00.000+00:00",
"number": "23",
"summary": "Neue Updates von Rocky Enterprise Software Foundation und Red Hat aufgenommen"
},
{
"date": "2026-07-29T22:00:00.000+00:00",
"number": "24",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-07-30T22:00:00.000+00:00",
"number": "25",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-03T22:00:00.000+00:00",
"number": "26",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-04T22:00:00.000+00:00",
"number": "27",
"summary": "Neue Updates von Red Hat, Amazon und IBM aufgenommen"
},
{
"date": "2026-08-05T22:00:00.000+00:00",
"number": "28",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-06T22:00:00.000+00:00",
"number": "29",
"summary": "Neue Updates von Red Hat aufgenommen"
},
{
"date": "2026-08-10T22:00:00.000+00:00",
"number": "30",
"summary": "Neue Updates von Red Hat aufgenommen"
}
],
"status": "final",
"version": "30"
}
},
"product_tree": {
"branches": [
{
"branches": [
{
"category": "product_name",
"name": "Amazon Linux 2",
"product": {
"name": "Amazon Linux 2",
"product_id": "398363",
"product_identification_helper": {
"cpe": "cpe:/o:amazon:linux_2:-"
}
}
}
],
"category": "vendor",
"name": "Amazon"
},
{
"branches": [
{
"category": "product_name",
"name": "Fedora Linux",
"product": {
"name": "Fedora Linux",
"product_id": "74185",
"product_identification_helper": {
"cpe": "cpe:/o:fedoraproject:fedora:-"
}
}
}
],
"category": "vendor",
"name": "Fedora"
},
{
"branches": [
{
"branches": [
{
"category": "product_version_range",
"name": "\u003c1.26.4",
"product": {
"name": "Golang Go \u003c1.26.4",
"product_id": "T054981"
}
},
{
"category": "product_version",
"name": "1.26.4",
"product": {
"name": "Golang Go 1.26.4",
"product_id": "T054981-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:golang:go:1.26.4"
}
}
},
{
"category": "product_version_range",
"name": "\u003c1.25.11",
"product": {
"name": "Golang Go \u003c1.25.11",
"product_id": "T054982"
}
},
{
"category": "product_version",
"name": "1.25.11",
"product": {
"name": "Golang Go 1.25.11",
"product_id": "T054982-fixed",
"product_identification_helper": {
"cpe": "cpe:/a:golang:go:1.25.11"
}
}
}
],
"category": "product_name",
"name": "Go"
}
],
"category": "vendor",
"name": "Golang"
},
{
"branches": [
{
"category": "product_name",
"name": "IBM Business Automation Workflow",
"product": {
"name": "IBM Business Automation Workflow",
"product_id": "T053688",
"product_identification_helper": {
"cpe": "cpe:/a:ibm:business_automation_workflow:-"
}
}
}
],
"category": "vendor",
"name": "IBM"
},
{
"branches": [
{
"branches": [
{
"category": "product_version",
"name": "azl3",
"product": {
"name": "Microsoft Azure Linux azl3",
"product_id": "T049210",
"product_identification_helper": {
"cpe": "cpe:/o:microsoft:azure_linux:azl3"
}
}
}
],
"category": "product_name",
"name": "Azure Linux"
}
],
"category": "vendor",
"name": "Microsoft"
},
{
"branches": [
{
"category": "product_name",
"name": "Oracle Linux",
"product": {
"name": "Oracle Linux",
"product_id": "T004914",
"product_identification_helper": {
"cpe": "cpe:/o:oracle:linux:-"
}
}
}
],
"category": "vendor",
"name": "Oracle"
},
{
"branches": [
{
"category": "product_name",
"name": "RESF Rocky Linux",
"product": {
"name": "RESF Rocky Linux",
"product_id": "T032255",
"product_identification_helper": {
"cpe": "cpe:/o:resf:rocky_linux:-"
}
}
}
],
"category": "vendor",
"name": "RESF"
},
{
"branches": [
{
"category": "product_name",
"name": "Red Hat Enterprise Linux",
"product": {
"name": "Red Hat Enterprise Linux",
"product_id": "67646",
"product_identification_helper": {
"cpe": "cpe:/o:redhat:enterprise_linux:-"
}
}
}
],
"category": "vendor",
"name": "Red Hat"
},
{
"branches": [
{
"category": "product_name",
"name": "SUSE Linux",
"product": {
"name": "SUSE Linux",
"product_id": "T002207",
"product_identification_helper": {
"cpe": "cpe:/o:suse:suse_linux:-"
}
}
},
{
"category": "product_name",
"name": "SUSE openSUSE",
"product": {
"name": "SUSE openSUSE",
"product_id": "T027843",
"product_identification_helper": {
"cpe": "cpe:/o:suse:opensuse:-"
}
}
}
],
"category": "vendor",
"name": "SUSE"
}
]
},
"vulnerabilities": [
{
"cve": "CVE-2026-27145",
"product_status": {
"known_affected": [
"T054981",
"T002207",
"67646",
"T027843",
"398363",
"T053688",
"T049210",
"T004914",
"T032255",
"74185",
"T054982"
]
},
"release_date": "2026-06-02T22:00:00.000+00:00",
"title": "CVE-2026-27145"
},
{
"cve": "CVE-2026-42504",
"product_status": {
"known_affected": [
"T054981",
"T002207",
"67646",
"T027843",
"398363",
"T053688",
"T049210",
"T004914",
"T032255",
"74185",
"T054982"
]
},
"release_date": "2026-06-02T22:00:00.000+00:00",
"title": "CVE-2026-42504"
},
{
"cve": "CVE-2026-42507",
"product_status": {
"known_affected": [
"T054981",
"T002207",
"67646",
"T027843",
"398363",
"T053688",
"T049210",
"T004914",
"T032255",
"74185",
"T054982"
]
},
"release_date": "2026-06-02T22:00:00.000+00:00",
"title": "CVE-2026-42507"
}
]
}
Loading…
Trend slope:
-
(linear fit over daily sighting counts)
Show additional events:
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
The MITRE ATT&CK techniques below are AI-generated suggestions, inferred from the description of the
vulnerability by the CIRCL/vulnerability-attack-technique-classification-roberta-base
model, served locally by ML-Gateway.
They have not been verified by an analyst and are provided for guidance only.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
The approach is described in our paper Mapping CVEs to MITRE ATT&CK Techniques: A Curated Gold-Set Classifier and the Limits of LLM-Assisted Label Expansion.
Loading…
Loading…